Sophos Firewall: v21.0 MR1: Feedback and experiences [Old]

Question

This Thread is locked - We re released this Version: Sophos Firewall: v21.0 MR1: Feedback and experiences 
 
 Release Post: Sophos Firewall OS v21 MR1 is Now Available 
 Release Notes: docs.sophos.com/.../sf_210_rn.html 
 Release Thread for V20.0 MR3: Sophos Firewall: v20.0 MR3: Feedback and experiences 
 To make the tracking of issues / feedback easier: Please post a potential Sophos Support Case ID within your initial post, so we can track your feedback/issue. 
 Only XGS Hardware is supported - Not XG/SG Hardware. Sophos Home is excluded, as it uses Software, which is supported. 
 Firmware update from the CM will be available after the firmware is available to all. Please refer to the standard update process . 
 Firmware update on Sophos firewall requires a valid support subscription (of any type - paid or trial) after the first 3 free firmware updates. Please be aware of the recent License Changes:

Michael Dunn · Accepted Answer

The important bit is 20.0 MR3 cannot upgrade to 21.0 GA 20.0 MR3 can upgrade to 21.0 MR1

LuCar Toni · Answer

Thanks to David Thomson and others here: We discovered a potential issue in V21.0 MR1 for smaller appliances like XGS116, which we are currently investigating. A Reference is: NC-152641 
 There will be more information to come how we can resolve this. Please - if you are affected by this, open a support case with the Reference to the NC-152641 - So we can look into this individually. 
 Update: We released a Hotfix to address this Problem.

bobbylam · Answer

Unfortunately due to an issue discovered with the Lets Encrypt feature with v21.0 MR1, we're going to pause the rollout of this release temporarily, and resume with an updated/fixed version of MR1. We're working on plans and dates for the updated release now, will keep this community posted. 
 In the meantime, those who have already upgraded to MR1 can continue to use it, as long as you're not using the Let's Encrypt feature. If you are using the Let's Encrypt feature, certificate generation/renewal may not work. However as long as your LE certificates are already generated and valid, they can continue to be used.

LuCar Toni · Answer

We released a Hotfix to address the Load Issue on certain affected Appliances. Feel free to comment on it. It should be now fine to update to V21.0 MR1.

LuCar Toni · Answer

The fix in V21.0 MR1 only prevents it from happening (breaking users). We applied a while ago a hotfix to firewalls to readjust the users and fixing them. 
 If you feel more comfortable - Perform the Sync of AUX before performing the update - There is no downside in doing it - It should not be needed at this point.

SPandya · Answer

if you could able to go to SFOS advance shell, use below command 
 
 cat /proc/sys/vm/swappiness 
 
 hotfix is applied if you get '60' as swappiness value

Vishal_R · Answer

Hi Nathan Kuhl. Yes, V21.0 MR1 will support a direct upgrade from your current version V20.0.2 MR-2, so you do not require GA installation to migrate to V21.0.1 MR-1. For more info, please refer to the "Upgrade Information" tab in the below release note. docs.sophos.com/.../index.html

LuCar Toni · Answer

We are not planning for HTTP/2 in WAF for this release cycle. HTTP/2 - benefits from the website designer and the implementation of the site the most. Putting only HTTP/2 on the WAF without Optimization of the Website behind WAF, will not increase the performance much. What kind of Webservices do you want to publish with WAF?

Vishal_R · Answer

Hi Nathan Kuhl -As mentioned in the release note here - This firmware release will follow our standard update process . To schedule it from Sophos Central, you need to wait until it is [Available to all] as per the standard update process.

Sophos Firewall: v21.0 MR1: Feedback and experiences [Old]

Top Replies