Related
Recommended
talex

Hi XG Community!

We've finished SFOS v16.05.2 MR2. This release is available from within your device for all SFOS v16.05 MR1 installations as of now and will increase the group in a few days.
The release is available to all SFOS version via MySophos portal.

Update: The release is available to all SF installations as of 17 March.

Issues Resolved

  • NC-15682 [API] Add migration support for CR 10.6.5 to SF 16.05
  • NC-13548 [Authentication] Not able to add STAS collector in new Group in IE 11
  • NC-16686 [Backup-Restore] Restoring of policy route fails
  • NC-6555 [Base System] Filter for WAF component is not available in Log Viewer
  • NC-16158 [CR-to-CN_Migration] Skip discover zone rules when migrating from CROS to SFOS
  • NC-16043 [Certificates] UI Label missing - Page System > Certificates > Certificate Authorities
  • NC-13711 [Documentation, Reporting] Adjust UI labels for reports
  • NC-13030 [Firewall] Improve firewall description for source and destination when using heartbeat
  • NC-14406 [Firewall] Unable to delete user if added to a firewall rule
  • NC-16269 [Firewall] Improve description of country group Africa
  • NC-16342 [Firewall] XG reboots whenever another XG that is connected via IPSec gets rebooted
  • NC-16159 [Galileo Heartbeat] Heartbeat service does not start automatically after HA failover
  • NC-11141 [HA] Clicking HA AUX configuration save button twice results in error message
  • NC-15699 [HA] HA A-A mode - AUX appliance is not passing traffic from bridge interface
  • NC-14992 [Hotspot] Hotspot stopped working due to missing chain "hotspot_filter_in"
  • NC-15768 [Hotspot] WLAN interface should be removed after deleting hotspot SSID
  • NC-15928 [Hotspot] Add support for TLS 1.1 and TLS 1.2
  • NC-15139 [IPS] Quality issues with VoIP calls when forwarded over XG
  • NC-16215 [Localization] Translation error on UI with traditional chinese
  • NC-15472 [Logging] Report SMTPs traffic when using secure communication over port 25
  • NC-14380 [Mail Proxy] Incorrect values shown for disk utilization for SMTP quarantine
  • NC-14539 [Mail Proxy] Legacy mode - improve notifiaction for delivery failure reason for SPX password requirement
  • NC-14822 [Mail Proxy] Email address should be displayed in log viewer for sandstorm email logs
  • NC-15201 [Mail Proxy] API Sample configuration missing for MTA
  • NC-15542 [Mail Proxy] Emails are rejected when service gets large number of IP reputation request
  • NC-15838 [Mail Proxy] Re-scan email for AV at time of release from quarantine in proxy mode
  • NC-16313 [Mail Proxy] Double dash in domain name not allowed in SMTP hostname
  • NC-16595 [Mail Proxy] MTA segfault in case of invalid content disposition header
  • NC-16608 [Mail Proxy] File is not blocked/filtered by MTA if file name contains i18n characters.
  • NC-16661 [Mail Proxy] Sandstorm scan is bypassed when attachment does not contain content-disposition
  • NC-17150 [Mail Proxy] Global SPX is not working in case of sender profile match and recipient profile does not match.
  • NC-16382 [Network Services] Cannot add non-hex values in DHCP server options
  • NC-15777 [Networking] Missing conntrack after migration of primary and backup gateway
  • NC-15476 [Qos] Wrong calculation of total guaranteed bandwidth
  • NC-15771 [RED] Cannot select 255.255.255.252 network in RED netmask in RED network settings
  • NC-15864 [RED] CCL details should be shown for TLS
  • NC-15950 [RED] Useless error message when wrong unlock code is entered
  • NC-11037 [Reporting] Data usage bar wraps to new line
  • NC-13574 [Reporting] Character corruption in traffic reports in Japanese language
  • NC-14554 [Reporting] Report notification email does not contain pdf attachment for non-english languages
  • NC-15715 [Reporting] Custom web reports shows the report for wrong time
  • NC-15767 [Reporting] Report group 'Sandbox' is displayed twice
  • NC-15787 [Reporting] File size content should not be clickable in detail report of Sandstorm module (both mail and web)
  • NC-15813 [Reporting] Summary tab is disabled when we click on detail report and no data is available for current filter
  • NC-15832 [Reporting] Mail report shows wrong number of mails sent
  • NC-16270 [Reporting] HA active passive - garner does not start after upgrade to SF 16.05 due to wrong name in OutputPlugin
  • NC-16508 [Reporting] Mismatch between objectionable websites count on control center and in reports
  • NC-4739 [Reporting] IPv6 address should be displayed in SSL VPN Remote Access User and Site to Site Usage Report
  • NC-13142 [SSLVPN] Revoking user certificate more than 10 times breaks SSL VPN remote access for all users
  • NC-15637 [SSLVPN] SSL VPN connection not possible if UDP is used
  • NC-15210 [Sandstorm] XML Export/Import does not work because Sandstorm get/set uses ids/names
  • NC-15644 [Sandstorm] Trial evaluation link sends incorrectly encoded activation link
  • NC-16282 [UI] WebAdmin is not accessible if special characters are used in company name
  • NC-1933 [Up2date Client] Wrong error message is shown for up2date pattern action when internet connection down
  • NC-16079 [VPN] IPsec service hangs until "send_mail_for_vpn_updown" opcode completes when email notification is used for updown event
  • NC-15629 [WAF] Fix padding oracle attack in mod_session_crypto (CVE-2016-073)
  • NC-16035 [WAF] Make cookiesign_drop_unsigned default to 1
  • NC-16318 [WAF] Prefork: MaxRequestWorkers of 256 exceeds ServerLimit value of 16 servers
  • NC-13988 [Web] MIME type multipart/form-data does not trigger HTTP uploads dynamic category
  • NC-14558 [Web] Use original destination port 443 in transparent mode for https-over-http case
  • NC-14970 [Web] NTLM authentication not working with Web Proxy
  • NC-15853 [Web] Redirection page issue with Sandstorm
  • NC-16192 [Web] Web Proxy restarting automatically
  • NC-15792 [Wireless] CVE-2016-5696: Update AP firmware
  • NC-15937 [Wireless] Fix visibility of Fast Transition option in different security modes
  • NC-16296 [Wireless] AP does not get IP address on 100 Mbit ethernet link
  • NC-6183 [Wireless] AWEd goes in unregistered state after HA failover

Downloads

You can find the firmware for your appliance from in MySophos portal.

Unfiltered HTML