Configuring VPN Remote Access for the first time on your Sophos XG Firewall? Check out this useful Community post!
Today we've released UTM 9.701. The release will be rolled out in phases.
In phase 1 you can download the update package from our download server, in phase 2 we will spread it via our Up2Date servers.
Already installed and rollin' :-)
Thanks for NUTM-11053 especially :-)
Yesterday, I had a planned update on two SG 125 from 9.700-4 to 9.700-5 to 9.701-6. Both apparently lost the update to 9.701-6 and it was only updated to 9.700-5.
ThorstenSult That's correct behavior, even if it created some additional work in your case. The system is syncing the update file list with the update server and since the 9.7 MR1 ist not yet there (it's in soft-release), the update get's purged from the system. This is the "recovery method" to remove not needed or faulty updates which could not be installed. In your case it removed a valid update because the up2date server is not yet aware of it. Please upload it again and install it. If your system takes too long to unpack/install the update, you can temporarily set the update check to manual.
Oh, okay. I did not know that. Thanks for the feedback.
NUTM-11345: It seems it's not working for me, i've updated the Proxy CA certificate, which is 2048 bit and imported it to IOS13, but the HTTPS websites can't be displayed.
I upgraded the firmware yesterday to 9.701-6 on our SG210 and this morning had a call from the office as no O365 e-mails had arrived for anyone and when I tried to login remotely I got in ok then the connection dropped for 10 seconds then connected then dropped again etc.
I rebooted the UTM and everyone’s e-mails came through and the connection has been ok since.
Not had any issues with this UTM every before.
After the update, I got the error "Failed to get SAVI instance" on almost every website.
It worked, after I changed the antivirus scan settings to Avira single scan engine.
Not sure if this is related to the Update...
Does NUTM-10625 mean that if we have 50+ IP addresses created, we are in violation of the license? At any given time, I usually have 11 active addresses, but I have 57 objects defined with static IPs.
gcracker IP addresses are counted only if traffic is seen originating from it.
That's a relief. The wording of the release notes imply otherwise:
**NUTM-10625 [Basesystem] IPs will be counted under license usage even they are not really active**