Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 68 replies
  • Subscribers 4 subscribers
  • Views 48683 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM v.9.005015 Soft-Release

Scott_Klassen
We just uploaded the UTM 9.005 Up2Date package to our FTP servers as  soft-release.  Please kick the tires and give it a try.

Angelo incoming:
9.005 contains a ton of compatibility improvements and stability enhancements for your Sophos UTM 9 release. In addition to adding official support for our new RED50 appliance, we have worked very hard to polish up the Web Filter and Wireless Protection areas of UTM 9, optimizing memory usage/consumption while plugging a few pesky memory leaks! The WAF has been improved with several bug fixes, and some reporting issues were also addressed. Internally, we have almost 100 issues that were addressed across many areas. For the best UTM 9 experience, you can install this soft-release now, or wait for the official GA in a weeks time (targeted estimate). Note that with the new incremental update system in UTM 9, if we do make changes to the GA from the soft-release issue, your installation will Up2date at that time without the need to roll back or perform command line trickery like editing the version number.
Enjoy! Let us know what you think, the dev's, myself, and other staff will monitor this thread until the GA Release.
/Angelo



Sophos UTM v.9.005015 Soft-Release

News

  • Support for RED50 appliances
  • Stability fixes for Web Filter
  • Stability fixes for Wireless APs
  • Bug fixes for Application Control
  • Updated timezone definitions


Remarks

  • System will be rebooted
  • Configuration will be upgraded
  • Connected Wifi APs will perform firmware upgrade
  • Connected RED devices will perform firmware upgrade


Bugfixes

  • 21785 Transparent Authentication does not work for IPv6 when SSL scanning is active
  • [V9] Form Hardening blocks request due to missing token, although URL Hardening Exception should allow access
  • 22456 Empty graphs in Hardware and Network Usage
  • 23179 Form Hardening doesn't support image type input form buttons


Download:
Up2Date Link: http://ftp.astaro.com/UTM/v9/up2date/u2d-sys-9.005015.tgz.gpg
Up2Date MD5Sum Link: http://ftp.astaro.com/UTM/v9/up2date/u2d-sys-9.005015.tgz.gpg.md5
Size: ~107 MB
MD5Sum: 0856b37fdf8060b8fac1710d7e0036f1


This thread was automatically locked due to age.
  • 0
    Awesome!  Off to the lab!

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Scott, question:  Included in part of the "stability fixes" for the APs, is their a fix for the poor AP10 signal quality reported at the end of last year?

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    Nice to hear. I assume this solve the memory problem. [:D]
  • 0
    nothing mentioned in the memory department.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    i'll check the release notes once i get this downloaded..[:)]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    This update killed our lab HA cluster ... info:

    (2) nodes setup on VMware ESXi 5.1, latest patches ... HA sync NICs on each VM are in a separate VLAN together... and this configuration has worked for testing, etc. for about a year now... when I applied this up2date, the slave node, while booting up, showed errors on the console (and, BTW, the original .2 address it says was in use is only used by this node!).  The Master node is up and working still.

    I figured out what happened; this up2date replaces the usually troublesome /etc/udev/rules.d/72-vmware-net.rules file... in order to get a VMware instance of UTM 9 to order the vNICs according to how you set them up in ESXi, you have to go in and delete this file, and edit the 70-persistent-net.rules file to reorder the NICs.  This up2date does not molest your edited 70-persistent-net.rules file, but it DOES add back in the vmware-net.rules file... and thus the NICs in our LAB instance got reordered (again) and this broke our HA cluster.

    So... if you have a VMware installation and have reordered your NICs (to maintain sanity), beware you may need to go back in the console to clean this up.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to William Warren
    nothing mentioned in the memory department.


    I'm pretty sure that's covered under the "Stability Fixes" listed for the Web Security (proxy) feature.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    @Bruce:  AP Signal Strength tagged for 9.006
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    @Bruce:  AP Signal Strength tagged for 9.006


    Thanks for the info; do you have a rough ETA for 9.006?  I know how these up2dates are sometimes, not going to hold you to any timeframe you publish [:)]

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Unfiltered HTML