Sophos Firewall: v18.5 MR1: Feedback and experiences

PS: Try the new DPI Engine Performance. 

PS2: Keep an eye for Facebook / sites + Firefox with DPI: https://support.sophos.com/support/s/article/KB-000042276?language=en_US

Hi,

currently using DPI for my various access in IP4 and IPv6 rules. The devices I have tested so far are my wife's MAC Air MI running latest firefox and accessing facebook, no apparent issues with my general testing.

Ipad using FB app and other activities all works vey well.

MAC Mini intel - appears to have fixed a lot of failing connection issues part the way through downloads from a photo album site and the downloads are very quick eg faster than I can scroll down to see if any entries have failed. Waiting for TOR browser to connect or fail. It has been trying for about 10 minutes so far - should be blocked.

Question, has the new DPI engine been fixed to work with mail scanning, I will test myself later.

Tomorrow's and the following days reports will be interesting to see what the date fix has done to the reported data.

Ian

There is a tradeoff with using the DPI engine in that you still need web proxy to achieve web site blocking as per the warning when you disable http proxy.

Hi,

currently using DPI for my various access in IP4 and IPv6 rules. The devices I have tested so far are my wife's MAC Air MI running latest firefox and accessing facebook, no apparent issues with my general testing.

Ipad using FB app and other activities all works vey well.

MAC Mini intel - appears to have fixed a lot of failing connection issues part the way through downloads from a photo album site and the downloads are very quick eg faster than I can scroll down to see if any entries have failed. Waiting for TOR browser to connect or fail. It has been trying for about 10 minutes so far - should be blocked.

Question, has the new DPI engine been fixed to work with mail scanning, I will test myself later.

Tomorrow's and the following days reports will be interesting to see what the date fix has done to the reported data.

Ian

There is a tradeoff with using the DPI engine in that you still need web proxy to achieve web site blocking as per the warning when you disable http proxy.