Sophos Firewall: v20.0 EAP1: Feedback and experiences

Hi,

Can confirm it works.

Thanks :-)Best regards

Martin

Hello,
has anyone managed to delegate ipv6 aftert the FritzBox on the Sophos?
ISP -> FB -> XG
If yes, how?

Hi,

I tried the PD and immediately lost internet access, I had to edit the WAN interface to get access restored.

PD does not appear to be of great value because you need a lot of information to configure it rather than the details being provided from the ISP. Also you need to configure an interface but none is selectable.

Ian

While IPv6 PD has been provided, there does not appear to be any changes to the IPv6 information eg no IPv6 FQDNs which still leaves holes in IPv6 security because you need to keep chasing IPv6 addresses to add to firewall rules.

Ian

WIFI, still not able to disable the local AP.

Ian

Memory and CPU load. At this stage the memory usage appears to be about the same as the v19.5 version. CPU/load takes a big hit when you edit the interfaces.

Ian

The good point so far is the adjustable size of the display. The bad point is the DHCP IPv6 fields are not scalable or adjustable in the DHCP static mapping table. No lease information on static addresses, I would expect the same as the IP4 static lease table.

Ian

Update:- IPv6 lease fields are not expandable even when you expand the GUI display, so you still cannot see the DUID or the assigned IP address.

Hello rfcat_vk,

Let me ping you directly to understand your concerns about DHCPv6-PD. Mainly,

- What caused Internet access lost. Was it some configuration issue?

- Could you successfully deploy DHCPv6-PD in your upstream and downstream interface or not.

Hello rfcat_vk,

IPv6 FQDN support is still in the future roadmap.

Hi sanket_shah,

thank you for the sad update. Are you able to provide an approximate version that the feature might be included in?

Ian