Hi XG Community!

We've finished SFOS v17.0.8 MR8. This release is available in stages. In first stage it will be available at MySophos. We then start with a small amount of slots for v17.0 and will increase those over time. Later it will be available to v16.05 installations as well.

Update: SFOS v17.0.8 MR8 is now available to all SFOS installations. It's also available via SFM/CFM.

Notes

Issues Resolved

  • NC-27996 [Authentication] access_server coredump results in users getting logged out
  • NC-29485 [Authentication] access_server coredumps and restartings
  • NC-28033 [Base System] Packet capture and connection list issue
  • NC-28566 [Base System] Garner service restarts
  • NC-27214 [Firewall] IPsec NAT chain for all VPN tunnels gets removed if only one tunnel goes down
  • NC-29243 [Framework(UI)] Subnet creation is broken for IE11
  • NC-26151 [IPsec] IPsec connections can't always be disabled on first try
  • NC-27034 [IPsec] IKE packets lost when routed over the HA link
  • NC-28076 [IPsec] IPsec detail view has a mismatch for tunnel status
  • NC-28558 [IPsec] 'UP' Email notifications are not sent when the IPsec tunnels come up again within 1 second
  • NC-28577 [IPsec] Two IKEs for the same connections leads to a lot REKEYED connection on responder
  • NC-28795 [IPsec] Strongswan service is stuck in CSC for HA pair
  • NC-28850 [IPsec] IPsec Connection UI page hangs
  • NC-28857 [IPsec] PFS is shown as enabled in GUI although it is disabled in policy
  • NC-28909 [IPsec] Coredump generated for charon due to segmentation fault
  • NC-29043 [IPsec] CSC hangs - system becomes unresponsive
  • NC-29129 [IPsec] IPsec connection is not reestablished after PPPoE reconnect
  • NC-29242 [IPsec] Cannot configure VPNs using IE11
  • NC-29254 [IPsec] Random route deletion in IPsec with DGD
  • NC-29378 [IPsec] vpnconn_all_status_update takes continuously high cpu when IPsec VPN manage page stays open
  • NC-29834 [IPsec] Multiple IKE_SAs in CONNECTING state for the same config when peer does not respond
  • NC-29936 [IPsec] vpnconn_all_status_update can overload the system
  • NC-29995 [IPsec] IPsec paketfilter rules missing after DGD failback
  • NC-30192 [IPsec] IPsec S2S connection not initiated after DHCP interface update
  • NC-28106 [RED] RED tunnel disconnects every 24h
  • NC-29465 [Reporting] Not able to send mail digest - due to PG connections full

Downloads

You can find the firmware for your appliance from in MySophos portal.

Parents
  • SPF checking is currently scheduled to be released in 2079. If you require essential basic email filtering processes that have been around for a decade, and that every single firewall supports except Sophos, best to use a better firewall. Sophos don't live in our world.

Comment
  • SPF checking is currently scheduled to be released in 2079. If you require essential basic email filtering processes that have been around for a decade, and that every single firewall supports except Sophos, best to use a better firewall. Sophos don't live in our world.

Children
No Data