Sophos Firewall: v19.5 MR1: Feedback and experiences

Hello Community,

This issue is now with DEV and investigated under NC-118460

Regards,

V19.5 MR2 was released. See: community.sophos.com/.../sophos-firewall-v195-mr2-is-now-available

Hello,

Good day and thanks for your patience on this. 

Was this previously working fine before? can you recall (if any) change/s in firewall configuration has been done prior this issue? or just only happened after the firmware upgrade?

Could you check if 'Apache' service still runs after you have been logged out by running this command on shell:

service -S | grep apache

If the status happened to be "Stopped" please run this command: service apache:start -ds nosync

Many thanks for your time and patience and thank you for choosing Sophos

Cheers,

not used Azure , 

this is my part number XG330 (SFOS 19.5.1 MR-1-Build278)

auto log out after upload 

Do you use Azure AD Signin? 

dear sophos support

please help

cannot upload ssl certificate public (ex. digicert) on sophos XG 330 version 19.5.1 MR 

1. generate CSR on devices 

2. public certicate used the vendor digicert 

3. affter process upload, sophos direct to log out

thanks 

Hello Jaroslav,

Thank you for the Case ID; I have added a note in the case and looped Alok.

Regards,

Hello,

So today it was repeated again... Case ID 06468265.

Hello!

Sophos Firewall v19.5 MR1 already supports TLS 1.3 for the WAF, but the generated config by the Firewall doesn't include the necessary parameter. (You can force-enable TLS 1.3 by modifying the config file directly.)

Is it possible to include It on the next release? Maybe v20 EAP? I've already sent feedback through the admin page.

SSLProtocol -all +TLSv1.2 +TLSv1.3

Thanks!

For the first customer we don't create cases because the reboot of the HA cluster did the trick.

For the second customer we had created the following cases:

Case #06334422 and #06365999

Both firewalls had to be replaced due to hard disk problems after the update to 19.5 MR1.

Also the rebuild of the HA was not easy, I had problems that after the rebuild several interfaces were not accessible. (which took about 10 min including some ping losses)

Only a failover to the auxillery firewall has solved the problem.

We are now monitoring the firewalls, the customer is unfortunately a bit pissed off.