Hi XG Community!

We've released SFOS v17.5.11 MR11 for the Sophos XG Firewall. Initially, the firmware will be available by manual download from the Licensing Portal. We then make the firmware available via auto-update to a number of customers, which will increase over time.

Please visit the following link for more information regarding the upgrade process: Sophos XG Firewall: How to upgrade the firmware.

Note: The upgrade from this version SF 17.5 MR11 to v18.0 will follow soon. 


Helpful Links

With the tremendous need for VPN connectivity in this challenging time, we have put together some important information here for you to achieve your networking needs:

  • Configure VPN Remote Access on your Sophos XG Firewall. Check out this useful Community post!
  • To substitute XG for RED devices via Light-Touch deployment from Sophos Central. Check out this useful Community post!


  • Sophos Connect (IPSec VPN) lease now supports more than 255 IP addresses in address range
  • Supports new SD-RED 20 and SD-RED 60 devices. SD-RED 20 and SD-RED 60 hardware is currently planned to be released in the week of April 6th

Issues Resolved

  • NC-48116 [Authentication] Importing users via csv file with special character in password fails
  • NC-54642 [Authentication] Authentication not working due to high CPU utilization of access_server
  • NC-55265 [Authentication] Not able to see entire IP address details for Live users on XG GUI
  • NC-49765 [Clientless Access] Clientless SMB Bookmark - Unable to upload files in a folder or share with a comma
  • NC-52709 [IPS Engine] IPS signature shown as detect with rule association 0 when set as DROP
  • NC-57067 [IPsec] Sophos Connect lease is not supporting more than 255 IP addresses in address range
  • NC-51862 [Logging Framework] Incorrect value received in gateway graph for PPPoE interface
  • NC-50796 [RED] All RED site to site tunnel restart when configuring one RED interface
  • NC-57800 [Reporting] Application summary in reports does not show any records
  • NC-46009 [SecurityHeartbeat] Spontaneous reconnects of many endpoints
  • NC-51562 [SecurityHeartbeat] Heartbeat service not started after HA failover


To manually install the upgrade, you can download the firmware from the Licensing Portal. Please refer to Sophos XG Firewall: How to upgrade the firmware.