Hi XG Community!
We've released SFOS v17.5.6 MR6 for the Sophos XG Firewall. Initially, the firmware will be available by manual download from your MySophos account. We then make the firmware available via auto-update to a number of customers, which will increase over time.
Please visit the following link for more information regarding the upgrade process: Sophos XG Firewall: How to upgrade the firmware.
Guidance on recently discovered security vulnerability in Exim email serverExim is used by XG Firewall v17.5, specifically if a customer has enabled Email Protection. On Friday 7 June 2019, Sophos released and automatically applied an over the air hotfix to all XG Firewalls with auto-updates enabled to address this issue. If your XG Firewall does not have auto-updates enabled, upgrading to 17.5 MR6 release could resolve the issue. Alternatively, you can review KB134199.
Radius SSO authentication between XG and APX
Wireless users can be authenticated using Radius SSO between XG and APX. Now supports framed IP addresses in client accounting messages.
To manually install the upgrade, you can download the firmware from the MySophos portal. Please refer to Sophos XG Firewall: How to upgrade the firmware.
Get this when downloading:
There is currently a problem when trying to download the firmware update file for 'Software'. We are working on a fix to get the issue solved.
Sorry for the inconvenience.
The issue with downloading the 'Software' update is fixed.
Oh man, you do not know how happy it makes me to see RADIUS SSO finally being fixed for XG APs.
Months and months of work!
Still not getting DCHP gateway...was hoping this would have been fixed.
Bit disappointed we only received one new feature this update, when can we expect to see more new features??
Just Now updated to MR6 as well as updated APX. System is working fine
Download OK - MR6 installed and APX firmware upgraded to 11.0.008 ;)
Installed, up and running on a simple VPN implementation. So far so good.
EmileBelcourt Do you have a working guide for setting up Windows Server with framed IP to XG ? ;-)
twister5800, yes, you set uo RADIUS accounting to windows NPS on port 1813 then you set Windows NPS to forward all accounting requests to the XG as an accounting server. Set up the XGs RADIUS SSO to accept SSO requests from the Windows NPS :)
I'll write a guide in the next 24 hours and link!
Hey BLS, what DHCP issue are you talking about? The wrong Gateway issue where a device has a static assignment in multiple scopes was fixed. I do however see the wrong DHCP server listed but not too fussed about that.
Backup via emails fails to work again. It was working fine three SFOS ago ... At the last update, but only after few days, it would work on some appliances. But now its kaput everywhere.
email notification for built in email server and external email server still not working.
test say it was successful but the test mail does not arrive in my mailbox
Sophos XG Home running in my house with an Intel Celeron dual core, 8gb ram, 120gb ssd, upgraded to this new version and still having issues with gui icons broken in firewall rules