Hi XG Community!

We've finished SFOS v17.0.8 MR8. This release is available in stages. In first stage it will be available at MySophos. We then start with a small amount of slots for v17.0 and will increase those over time. Later it will be available to v16.05 installations as well.

Update: SFOS v17.0.8 MR8 is now available to all SFOS installations. It's also available via SFM/CFM.

Notes

• On v16 to v17 update, SFOS does not set SHA2 truncation on custom IPSec policy. Please see https://community.sophos.com/kb/127867

Issues Resolved

• NC-27996 [Authentication] access_server coredump results in users getting logged out
• NC-29485 [Authentication] access_server coredumps and restartings
• NC-28033 [Base System] Packet capture and connection list issue
• NC-28566 [Base System] Garner service restarts
• NC-27214 [Firewall] IPsec NAT chain for all VPN tunnels gets removed if only one tunnel goes down
• NC-29243 [Framework(UI)] Subnet creation is broken for IE11
• NC-26151 [IPsec] IPsec connections can't always be disabled on first try
• NC-27034 [IPsec] IKE packets lost when routed over the HA link
• NC-28076 [IPsec] IPsec detail view has a mismatch for tunnel status
• NC-28558 [IPsec] 'UP' Email notifications are not sent when the IPsec tunnels come up again within 1 second
• NC-28577 [IPsec] Two IKEs for the same connections leads to a lot REKEYED connection on responder
• NC-28795 [IPsec] Strongswan service is stuck in CSC for HA pair
• NC-28850 [IPsec] IPsec Connection UI page hangs
• NC-28857 [IPsec] PFS is shown as enabled in GUI although it is disabled in policy
• NC-28909 [IPsec] Coredump generated for charon due to segmentation fault
• NC-29043 [IPsec] CSC hangs - system becomes unresponsive
• NC-29129 [IPsec] IPsec connection is not reestablished after PPPoE reconnect
• NC-29242 [IPsec] Cannot configure VPNs using IE11
• NC-29254 [IPsec] Random route deletion in IPsec with DGD
• NC-29378 [IPsec] vpnconn_all_status_update takes continuously high cpu when IPsec VPN manage page stays open
• NC-29834 [IPsec] Multiple IKE_SAs in CONNECTING state for the same config when peer does not respond
• NC-29936 [IPsec] vpnconn_all_status_update can overload the system
• NC-29995 [IPsec] IPsec paketfilter rules missing after DGD failback
• NC-30192 [IPsec] IPsec S2S connection not initiated after DHCP interface update
• NC-28106 [RED] RED tunnel disconnects every 24h
• NC-29465 [Reporting] Not able to send mail digest - due to PG connections full

Downloads

You can find the firmware for your appliance from in MySophos portal.