Sophos Firewall: v19.5 MR1: Feedback and experiences

I am assuming they haven't found anything?    We have an open case as well for the same issue.  

Hello there,

I am sorry to hear about your bad experience.

Can you share the Case ID you have open with Support?

Regards,

Same ticket as mine, 06310523.  It's already been escalated.  Sent another batch of files to them earlier today and they are reviewing now.

Hello Brandon,

Thank you for the Case ID, I see your case is with an L2, but GES/DEV  are interested in looking at this, so I have requested the engineer to escalate it to them.

Regards,

Same problem as other Users with the HA.

At one customer a HA pair of XGS2100 just hung up, so WebGUI was unresponsive.

Reboot over the display was not possible, after unplugging the devices took about 20min for the boot to be completed.

An other customer has 2 died XGS2100 after the update to 19.5 MR1, one died directly after the update, the other a few days later.

Both firewalls have problems with the disk an had to be replaced by Sophos (fortunately they were quickly replaced).

Hello Thomas,

Thank you for contacting the Sophos Community.

Sorry to hear about the issue you had.

Can you share the Case IDs you opened with support for the issues you mentioned.

Regards,

For the first customer we don't create cases because the reboot of the HA cluster did the trick.

For the second customer we had created the following cases:

Case #06334422 and #06365999

Both firewalls had to be replaced due to hard disk problems after the update to 19.5 MR1.

Also the rebuild of the HA was not easy, I had problems that after the rebuild several interfaces were not accessible. (which took about 10 min including some ping losses)

Only a failover to the auxillery firewall has solved the problem.

We are now monitoring the firewalls, the customer is unfortunately a bit pissed off.

Hello!

Sophos Firewall v19.5 MR1 already supports TLS 1.3 for the WAF, but the generated config by the Firewall doesn't include the necessary parameter. (You can force-enable TLS 1.3 by modifying the config file directly.)

Is it possible to include It on the next release? Maybe v20 EAP? I've already sent feedback through the admin page.

SSLProtocol -all +TLSv1.2 +TLSv1.3

Thanks!

Hello,

So today it was repeated again... Case ID 06468265.

Hello Jaroslav,

Thank you for the Case ID; I have added a note in the case and looped Alok.

Regards,