New Firmware 16.05.8 MR-8 stable?

Hi

I just received the message from the XG 105w that the firmware 16.05.8 MR-8 is available and should be installed. But so far I did not read anything (good or bad) about that version here. Is it recommeded to install the file or are there major issues ?

Thank you

BR

Wolf

  • Any release notes available? 

  • In reply to R0n1:

    That would be very helpful.

  • Hi Canis68,

    Me too. I did not find the mr8 release notes.

    Sophos?

     

    Rodrigo

  • The release notes popped up in one of my XG upgrade firmware notices just now:

    Version
    • SF 16.05 MR8 (16.05.8.320)
    News
    • Maintenance Release.
    Bugs
    • NC-21404 [Authentication] Authentication Agent - getting logged out automatically at random time.
    • NC-21538 [Authentication] STAS user login getting failed because access_server is assigning existing liveuserid to new login user.
    • NC-19642 [Base System] Apache httpd vulnerabilties (CVE-2017-3169, CVE-2017-7679).
    • NC-19915 [Base System] Add support for newer SG210,SG230,SG310,SG330,SG430,SG450,SG550 and SG650 models in SFOS.
    • NC-21583 [Base System] Up2date patterns status is shown as "Failed" in 16.05 MR7.
    • NC-22018 [Base System] Openssl update for v16.05.
    • NC-22059 [Firewall] SSL decryption should not be enabled by the wizard.
    • NC-19646 [IPS] i40e driver version 1.1.23 doesn't work properly with 4x10G ports.
    • NC-21712 [IPS] IPS service not starting in v16.05 MR7.
    • NC-21566 [Mail Proxy] Inbound emails stopped in legacy mode after upgrade to 16.05 MR-7.
    • NC-18875 [Networking] USB devices not reconnecting after reboot .
    • NC-20763 [RED] RED15w does not send split DNS traffic over RED tunnel.
    • NC-20531 [SecurityHeartbeat] Server certificate expired - all clients will be marked as RED.
    • NC-22152 [Web] NTLM channel re-initiated repeatedly on booting the appliance.
    • NC-21548 [Wireless] API for Wireless Network Enable/Disable.
  • In reply to Chris Shipley:

    Chris,

    where did you get this pop-up from?

    Let's wait for the official 's post.

    Thanks for sharing it.

  • In reply to lferrara:

    When I went back to the control center a second time, after first dismissing the alert that MR8 was available, the system showed me the alert again with those release notes.

  • In reply to Chris Shipley:

    Chris,

    can you share a screenshot?

    I am on v17 beta.

    Thanks

  • In reply to lferrara:

    Luk,

    Check it out...this is a nice improvement.  Strange in that I had to dismiss, logout, then log back in to see these release notes:

     

    Thanks,

    John

  • In reply to lferrara:

    A new firmware SFOS 16.05.8 MR-8 is available. We strongly recommend that you upgrade the device.
    Version
    SF 16.05 MR8 (16.05.8.320)
    News
    Maintenance Release.
    Bugs
    NC-21404 [Authentication] Authentication Agent - getting logged out automatically at random time.
    NC-21538 [Authentication] STAS user login getting failed because access_server is assigning existing liveuserid to new login user.
    NC-19642 [Base System] Apache httpd vulnerabilties (CVE-2017-3169, CVE-2017-7679).
    NC-19915 [Base System] Add support for newer SG210,SG230,SG310,SG330,SG430,SG450,SG550 and SG650 models in SFOS.
    NC-21583 [Base System] Up2date patterns status is shown as "Failed" in 16.05 MR7.
    NC-22018 [Base System] Openssl update for v16.05.
    NC-22059 [Firewall] SSL decryption should not be enabled by the wizard.
    NC-19646 [IPS] i40e driver version 1.1.23 doesn't work properly with 4x10G ports.
    NC-21712 [IPS] IPS service not starting in v16.05 MR7.
    NC-21566 [Mail Proxy] Inbound emails stopped in legacy mode after upgrade to 16.05 MR-7.
    NC-18875 [Networking] USB devices not reconnecting after reboot .
    NC-20763 [RED] RED15w does not send split DNS traffic over RED tunnel.
    NC-20531 [SecurityHeartbeat] Server certificate expired - all clients will be marked as RED.
    NC-22152 [Web] NTLM channel re-initiated repeatedly on booting the appliance.
    NC-21548 [Wireless] API for Wireless Network Enable/Disable.

  • In reply to Ahmed Swidan:

    Hi all,

    Sorry we have public holiday in Germany so I'm a bit late with the release notes ;o)

    Here it is: https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-16-05-8-mr8-released

     

    Please be aware that:

    a) the upgrade to v17.0 Beta is currently not supported

    b) all issues fixed in SF v16.05.8 MR8 are also fixed in SF v17.0 Beta 1 or Beta 2 (which will come soon)

  • In reply to talex:

    Hey Luk,

    I think the mr8 update had to download fully before you received the notification? I only found the update was at 0.5% when I checked after seeing the comment in the forum, I did not see the release notes.

    Ian

  • In reply to rfcat_vk:

    Hi,

    reporting issues with MR8. M7 generated all my reports in BST, MR8 is now generating them in GMT even though my time zone is AEDT..

     

    Will someone in Sophos please address this issue eg use the XG clock not the BIOS clock and the correct time zone.

    Perhaps if the XG had an NTP proxy this would not be an issue.

     

    Ian

  • In reply to rfcat_vk:

    Ian,

    same behaviour applies to v17 beta. I am receiving Daily reports at 1 p.m even if they are scheduled for 11 a.m.

    Another thing that is happening from the first release of XG, I am not receiving Daily report at 11.00 but 11.10, 11.14, 11.50, (random time).

    So, in case you have an internal department that needs to analyze reports at specified time, this is not nice and professional.

  • In reply to lferrara:

    Same issue with the random report times. Generated sometime after they are scheduled.

    The other minor annoyance is when you do a restart after the upgrade you get a full set of reports regardless of time.

    Ian

  • In reply to rfcat_vk:

    Ian,

    same behaviour after the system restarts.

    Regards