Firewall SFOS v21 update with Central?

Hello,

we would like to update SFOS/XGS appliances of our customers to v21 with central.

We have to use central because there is no other way to do this scheduled at night. Version 21 GA was 17.10.2024 and the update is still not possible to do with central? Really?

How to handle security updates / critical CVEs if you have to wait weeks to do that scheduled with central for all your customers?

regards

Parents

0 LuCar Toni 4 days ago

Is there a Security Update, you need in V21.0 GA?

GA Releases usually take a long time to remain in staging - We are doing this, as most customers and partner only install it, if it is available on the firewall and as we have a big installation base, we want to slow down the installation (staging) to monitor issues coming up.

If we would release it all to the entire installation base, something breaks, we would have to roll back all customers etc.

SFOS as UTM has a slow Release cycle for GA releases.

Based on the approach with Hotfixes, we can also react differently to CVEs and other issues.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Steve Weißflog 4 days ago in reply to LuCar Toni

I know the update staging process - and this is ok and you also do that process locally.

The Central Update should be available as soon as the locally update on the appliance is possible and that`s it...

No security issue as far as I know (I hope for security updates the central update will be faster) - We would like to have V21.0 GA especially on the appliances where the v 21 update is locally already available...

And also the speed of v 21 is a really improvement...

regards
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 LuCar Toni 17 hours ago in reply to Steve Weißflog

The current situation: SFOS will show the Staging Releases (Flagged as Staging). At this point, the firewall sees the new Firmware, but Central does not.

The reason is, Central will wait until the release is GA for all Firewalls and then make it available for all firewalls.

This is partly documented here: Firewall Firmware Release Process and Timeline

We will update this Release Notes to reflect this more specific - As well as update the Sophos Central online help: https://docs.sophos.com/central/Customer/help/en-us/ManageYourProducts/FirewallManagement/Firewalls/UpgradeFirmware/index.html

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 LuCar Toni 17 hours ago in reply to Steve Weißflog

The current situation: SFOS will show the Staging Releases (Flagged as Staging). At this point, the firewall sees the new Firmware, but Central does not.

The reason is, Central will wait until the release is GA for all Firewalls and then make it available for all firewalls.

This is partly documented here: Firewall Firmware Release Process and Timeline

We will update this Release Notes to reflect this more specific - As well as update the Sophos Central online help: https://docs.sophos.com/central/Customer/help/en-us/ManageYourProducts/FirewallManagement/Firewalls/UpgradeFirmware/index.html

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data