Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Firewall: v19.5 MR1: Feedback and experiences

Release Post:   Sophos Firewall OS v19.5 MR1 is Now Available 

The old V19.5 GA Thread:  Sophos Firewall: v19.5 GA: Feedback and experiences 



Removed Prio.
[gesperrt von: LuCar Toni um 11:37 AM (GMT -7) am 9 May 2023]
Parents
  • Just upgraded two nodes from 19.5 GA (XG330) and 19.0-MR1 (XG230) to SFOS 19.5-MR1.

    The XG230 sites just worked fine, but the XG330 site got DPI-Engine FLOW_TIMEOUT_ERRORS for the internal Exchange ActiveSync connection so we need to roll back to SFOS 19.5 GA.

    As troubleshooting we just disabled DPI-Engine and turned firewall accleration off but without any positive effects.

    The Outlook client just shows connected for 1-2 minutes, after that the Client is going to get disconnected and you cannot reconnect, after rollback everything worked fine again on the XG330 site.

    The XG230 is connecting to the exact same Exchange server with the exact same security policies and its working fine.

Reply
  • Just upgraded two nodes from 19.5 GA (XG330) and 19.0-MR1 (XG230) to SFOS 19.5-MR1.

    The XG230 sites just worked fine, but the XG330 site got DPI-Engine FLOW_TIMEOUT_ERRORS for the internal Exchange ActiveSync connection so we need to roll back to SFOS 19.5 GA.

    As troubleshooting we just disabled DPI-Engine and turned firewall accleration off but without any positive effects.

    The Outlook client just shows connected for 1-2 minutes, after that the Client is going to get disconnected and you cannot reconnect, after rollback everything worked fine again on the XG330 site.

    The XG230 is connecting to the exact same Exchange server with the exact same security policies and its working fine.

Children