Related
Recommended
talex

Hi XG Community!

We've updated XG Firewall with v16.05, which is a new small feature release. This release is available to all v16 and v15 users via our update servers in a staged approach. 

For detailed list of features and changes , Please refer the attached Release Note : Sophos XG Firewall v16_05 RN_v3.3.pdf

Please refer the attach guide to assist users migrating from Cyberoam to XG : Cyberoam to Sophos Firewall Migration Guide.pdf

New Features

  • Sandstorm for Mail
  • Sandstorm for Web

Issues Resolved

  • NC-12759 [Authentication] Segmentation Fault of access server
  • NC-13930 [Authentication] Access_server segmentation fault
  • NC-14100 [Authentication] Appliance IP doesn't appear on general tab of STAS suite
  • NC-14160 [Authentication] Netbios packages sent out via WAN port
  • NC-13972 [Base System] Webadmin certificate is not updated when changing common name in ca certificate
  • NC-14123 [Base System] No reconnect of ipsec tunnel when using IPv6
  • NC-14140 [Base System] If VPN profile name is matching an existing log file then the profile will log to this log file
  • NC-15736 [Base System] Fix sending telemetry data
  • NC-14227 [Certificates] Improve error message for Certificate Revocation List
  • NC-3820 [Certificates] The validation period To/From is not taken into account for CRL uploads
  • NC-13394 [Clientless Access(HTTP/HTTPS)] Japanese character issue in HTTP bookmark of clientless access
  • NC-13014 [FirewallDatapath] Not able to ping local machine located in DMZ zone from LAN zone with IPsec S2S tunnel setup
  • NC-13665 [Firewall] Skipping load balancing for missing heartbeat drop traffic
  • NC-13702 [Firewall] Block Page with captive portal link shown for users when webfilter + user based rules are used
  • NC-13987 [Firewall] Wizard failed after configure DOS rule using src-zone
  • NC-14137 [Firewall] 'Internet Scheme' page loading failed
  • NC-11810 [Framework(UI)] Application List headings are removed after applying filter
  • NC-13043 [Framework(UI)] Control Center - system graph initially renders without title
  • NC-13858 [Framework(UI)] Improve XG Firewall dashboard diagrams
  • NC-14649 [Framework(UI)] Possible SQL injection in EventViewerHelper
  • NC-14671 [Framework(UI)] XSS in LiveConnectionDetail.jsp in SFOS
  • NC-15101 [Framework(UI)] Apache service stop in case of certificate names contain space characters
  • NC-8116 [Framework(UI)] Disable TLS1.0 and TLS1.1 support for Webadmin and Userportal
  • NC-14995 [Galileo Heartbeat] Heartbeat - Service restarting automatically
  • NC-14244 [Hotspot] Hotspot type POTD send extra mail while updating password creation time
  • NC-13610 [IDS + AppControl] Psiphon Proxy application is not blocked
  • NC-13496 [IPS] Wrong ip address shown in web filter logviewer when device configured in TAP-Mode
  • NC-14231 [IPS] Internet traffic dropped by IPS if network subscription is missing
  • NC-12228 [Mail Proxy] MIME whitelist box is not large enough to display the entire text
  • NC-14093 [Mail Proxy] Proxy stops processing mails if IP reputation is enabled with action "Reject"
  • NC-14098 [Mail Proxy] Delivery failure notification not sent if sender or recipient email address contains space character
  • NC-14178 [Mail Proxy] SMTP proxy dies to due to specific characters in return path of delivery failure notification
  • NC-14213 [Mail Proxy] Read only profile should be set in Email protection in HA mode
  • NC-15657 [Mail Proxy] Sandstorm malicious mails should not be releasable from Spam Digest Email
  • NC-13448 [Network Services] DHCP service dies while binding custom option to DHCP Server
  • NC-12214 [Networking] New warning message for unbinding interfaces trivialize effects
  • NC-12966 [Networking] WWAN connectivity issue with Huawei E3372
  • NC-13449 [Networking] DHCP Option is deleted without removing it's binding.
  • NC-13599 [RED] Transparent Split and 3G Failover should not be possible to configure
  • NC-14164 [RED] [RED] implement "TLS 1.2 only" mode
  • NC-11769 [Reporting] Event Type 'Not Available' seen in Reports of Admin Events
  • NC-12472 [Reporting] PDF Report Export/On Demand: When records continue on 2nd page server time change
  • NC-13257 [Reporting] Pagination is not working for "Interface" widget in executive report.
  • NC-14337 [Reporting] Reports is not loading when language is spanish
  • NC-6345 [Reporting] Custom Reports: Sometimes application/protocoll filter is not working properly
  • NC-12969 [SSLVPN] SSLVPN Remote-Access to Apple iPhone: traffic cannot pass through tunnel
  • NC-15615 [Sandstorm] sandboxd and sandbox_reportd do not start on new install without reboot
  • NC-15644 [Sandstorm] Trial evaluation link sends incorrectly encoded activation link
  • NC-13945 [UI] Log Viewer link from widget window is not working
  • NC-13995 [VPN] VPN failover group stops retrying after couple of minutes
  • NC-6589 [VPN] DHCP_V6A_IPSec connection not re-connected when changing IPv4 address of the same WAN interface
  • NC-14118 [WAF] SFM MR-2 can not push web server configuration to SFv16 device
  • NC-11111 [Web] Captive Portal settings: unauthenticated users redirection does not work
  • NC-10629 [Wireless] Wifiauth service dies
  • NC-13207 [Wireless] hostapd dies state after updating radius server in wireless global settings
  • NC-13340 [Wireless] Update organizationally unique identifier (OUI) library
  • NC-13940 [Wireless] Red15w wireless is not detected
  • NC-14000 [Wireless] DHCP option 234 code missing in "editreddevice" opcode
  • NC-9469 [Wireless] WLAN interfaces are not shown in network configuration wizard if wireless network name contains 'WLAN'

Known Issues

  • n/a

Downloads

You can find the firmware for your appliance from in MySophos portal.

Unfiltered HTML