Documentation changes for the week of August 2nd

Sophos Firewall

New

• Upstream proxy: Task page and How to articles
  • https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/tasks/UpstreamProxy.html
  • https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/RoutingConnectUpstreamProxyWAN.html
  • https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/RoutingConnectParentProxyLAN.html
  • https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/tasks/UpstreamProxy.html
  • https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/RoutingConnectUpstreamProxyWAN.html
  • https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/RoutingConnectParentProxyLAN.html
    
    
• Sophos Firewall: Unable to update the SSL VPN configuration
  • KB 000040346: Sophos Firewall: Unable to update the SSL VPN configuration
    
    
• Sophos Firewall: IP MIB not supported
  • KB 000042468: Sophos Firewall: IP MIB not supported
    
    

Updated

• Renamed Central Management to SFM
  • https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/tasks/CentralManagementConfigure.html
  • https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/tasks/CentralManagementSFMConfigure.html
    
    
• Removed 18.0 firmware references
  • https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/BackupsFirmware.html
    
    
• RED unified firmware's default setting
  • https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/nsg/concepts/RED.html
  • https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/concepts/RED.html
    
    
• Added "SFOS v17.5 MR17 and later" and changed v18 MR6 to v18 MR7 under New Sophos Dynamic DNS configuration section.
  
  • KB 000041764: Sophos Firewall: Discontinuation of the Sophos Dynamic DNS myfirewall.co

• Changed the status of UKI - Termed from Scheduled to begin on 04 Aug 2021 to Complete (except HA A/A).
  • KB 000042371: Sophos Firewall: Migration of licenses for existing SFOS customers with license bundles
    
    
• Added a command to use grep with the drop-packet-capture.
  • KB 000036858: Sophos Firewall: How to monitor dropped packets using CLI
    
    
• Updated the nsxld image and added links to online documentation.
  • KB 000037012: Sophos Firewall : How web categorization works and how to lookup a URL
    
    
• Added the step advising customers to change the password to a complex one.
  • KB 000035990: Sophos Firewall: Reset or change the admin password
    
    
• Added info on End of Sale announcement and End of Life on affected XG devices. Added the missing and misplaced versions for RED 15.
  • KB 000035279: Retirement calendar for Sophos SG UTM, Sophos Firewall, Wireless, and RED
    
    
• Corrected the example IPs under the Console section and added a link to the online documentation.
  • KB 000038927: Sophos Firewall: Check the routing information of any IP address from the appliance
    
    
• Updated to show that backup-restore from wireless to non-wireless is currently not supported.
  • KB 000036245: Sophos Firewall, Sophos UTM, Cyberoam: Backup-restore compatibility check
    
    
• Updated the title of the article to match its content.
  • KB 000036032: Sophos Firewall: Devices not getting dynamic DHCP lease when a static MAC-IP reservation exists
    
    
• Corrected the referenced UI and added a link to the online documentation.
  • KB 000035635: Sophos Firewall: Allow admin access to a user that is authenticating from an external server
    
    
• Added a link to the online documentation.
  • KB 000035696: Sophos Firewall: Why are inbound emails from specific addresses blocked?
    
    
• Corrected the order of the steps and added a link to the online documentation.
  • KB 000035771: Sophos Firewall: Turn off on-box reporting
    
    
• Corrected the referenced UI, removed the outdated image, and added a link to the online documentation.
  • KB 000035808: Sophos Firewall: How to view the report of files uploaded from my network?
    
    
• Updated screenshots.
  • KB 000036884 Sophos Firewall: Troubleshoot SSL VPN remote access connectivity and data transfer issues
    
    
• Corrected the referenced UI, and added the correct PuTTYgen link.
  • KB 000036890: Sophos Firewall: Set up public key authentication for admin
    
    

Sophos Central

Updated

• The following articles were updated as the existing IaaS connector functionality has been replaced by the superior cloud visibility and security capabilities of Cloud Optix.
  • KB 000036365: Sophos Central Server: Troubleshooting Sophos Central connections to AWS
  • KB 000036467: Sophos Central Server: Installing Sophos on an AWS AMI
  • KB 000036466: Sophos Central: FAQs on Amazon Web Services integration
  • KB 000036473: Sophos Central Server: Installing Sophos with Shell Scripts on Instance Launch
  • KB 000036639: Sophos Central: How to Create an IAM Role
  • KB 000036668: Sophos Central Server: How to Create/Configure images for Windows servers in Microsoft Azure
  • KB 000036670: Sophos Central: FAQs on Microsoft Azure integration
  • KB 000036671: Microsoft Azure - Workflows for creating/configuring images for Linux servers
  • KB 000036881: Sophos Central: How to create application registrations and set permissions in Microsoft Azure
  • KB 000036883: Sophos Central: How to troubleshoot connections to Microsoft Azure
  • KB 000038317: AWS S3 storage information and health
    
    

Endpoint

Updated

• Added entry to restart the SSP service.
  • KB 000035303: Sophos Endpoint: How to enable verbose logging for Sophos System Protection
    
    
• Removed info on HP-UX since it has been retired last June 2020.
  • KB 000038490: Sophos Anti-Virus for Linux/UNIX: Usage of commands to start and stop services
     

Sophos Mobile

New

• Describe periodic client synchronization and how to configure it.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/concepts/PeriodicDeviceSync.html
    
    
• List the IP addresses used by Sophos Mobile to connect to the LDAP and SCEP server. Also, explain how to find out the region for a Sophos Central account.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/concepts/IPsForLDAPAndSCEP.html
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/FindOutCentralRegion.html

  • https://docs.sophos.com/esg/smc/9-7/admin/en-us/esg/Sophos-Mobile/concepts/IPsForLDAPAndSCEP.html

Updated

• Clarified which oAuth settings in the iOS EAS policy are optional.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/references/ConfigurationEASIOS.html
    
    
• Added a note to the Lock device topic that Windows computers can't be locked.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/LockDevice.html
    
    
• In the Migration Guide, improved the note about keeping the on-premise server running as long as there are devices redirected. Also, showed the note on two more pages.
  • https://docs.sophos.com/esg/smc/9-7/admin/en-us/esg/Sophos-Mobile/concepts/DeviceMigration.html
  • https://docs.sophos.com/esg/smc/9-7/admin/en-us/esg/Sophos-Mobile/tasks/MigrationChecklist.html
  • https://docs.sophos.com/esg/smc/9-7/admin/en-us/esg/Sophos-Mobile/tasks/RunMigrationAssistant.html
    
    
• Documented the Wi-Fi policy setting Security type.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/references/ConfigurationWiFiIOSUser.html
    
    
• Made the note regarding the "10 Android Enterprise devices per user" limitation more prominent.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/EnrollAndroidEnterpriseDevice.html
    
    
• Updated the documentation on how to assign devices in Apple Business Manager. Parts of the description didn't match the ABM UI.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/DEPDeployDevices.html
    
    
• Added a note that Apple Business Manager tokens can only be used for a single MDM provider. Customers should revoke and remove any tokens used with other MDM providers before uploading a token to Sophos Mobile.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/VVPUploadToken.html
    
    
• Updated and improved the description of the Maximum number of failed attempts Windows Password policy setting
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/references/ConfigurationPasswordPoliciesWD.html
    
    
• Added a note for Android Enterprise Restrictions device policy, that you can’t disable system apps after you enabled them.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/references/ConfigurationRestrictionsAfWDO.html
    
    
• Updated the procedure for setting up Android Enterprise Google Managed Domain with the latest workflow changes in the Google consoles.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/learningContents/SetUpAEManagedDomain.html#task_1585897544767
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/learningContents/SetUpAEManagedDomain.html#task_1594724583548
    
    
• Added a note that Windows 10 Home doesn't support installing apps from MSI files.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/SoftwarePackagesInstall.html
    
    
• Restructured the description on how to lock a device.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/tasks/LockDevice.html
    
    
• Added a note that you can't manage system extensions (introduced with macOS Catalina 10.15) with the Kernel extension policy.
  • https://docs.sophos.com/central/Mobile/help/en-us/esg/Sophos-Mobile/references/ConfigurationKernelExtensionPolicyMacOSD.html
    
    

Others

Updated

• Updated to reflect the recent update to the Sophos Central-managed SVE installer. MFA-enabled accounts can now be used during the installation of SVE.
  • KB 000037990: Sophos for Virtual Environments: Security VM installer fails to connect to Sophos Central when using an administrator account that uses Central Multi-Factor Authentication
    
    
• Removed the information about Threat Searches and replaced it with "Threat Hunting under Live Discover" to match the current version of Sophos Central dashboard.
  • KB 000036922:ML detections explained
    
    
• Updated the macOS release notes link.
  • KB 000033303: Latest version of Sophos products