Overview
Starting in April, all new APX Series access points which are shipped from Sophos warehouses will have an under-the-hood hardware upgrade. For these access points to be registered with either Sophos UTM (SG Series) or Sophos Firewall OS (XG/XGS Series), they require a newer firmware version (11.0.019) which is now being made available. Sophos Central Wireless customers do not need to take any action.
This hardware change has no impact on the supported features, capabilities, or other functionality of the access point.
How to identify if your APX Series is affected
You can identify new APX models with this change by the serial number prefix.
|
Model |
Prefix |
|
APX 120 ETSI |
P32007 |
|
APX 120 FCC |
P31006 |
|
APX 120 ROW |
P33005 |
|
APX 320X ETSI |
P42006 |
|
APX 320X FCC |
P41006 |
|
APX 320X ROW |
P43005 |
|
APX 320 ETSI |
P52007 |
|
APX 320 FCC |
P51006 |
|
APX 320 ROW |
P53006 |
|
APX 530 ETSI |
P12007 |
|
APX 530 FCC |
P11006 |
|
APX 530 ROW |
P13006 |
|
APX 740 ETSI |
P22006 |
|
APX 740 FCC |
P21006 |
|
APX 740 ROW |
P23006 |
Dates for change rollout
- Sophos Central Wireless APX firmware release 2.3.4 : April 11 (US-East2) to April 18, 2022
- APX firmware version 11.0.019 for Sophos Firewall OS (SFOS) : April 5, 2022
- APX firmware version 11.0.019 for Sophos UTM 9.7 MR 11 : April 18, 2022
No Action required
Sophos Central Wireless customers
No action is required by customers using Sophos Central as the APX will be upgraded when the device is registered.
Existing customers with an APX Series already registered in UTM/SFOS
Existing customers who have already successfully registered their APX access point with Sophos UTM or Sophos Firewall OS do not need to take any action as the access point model will not have one of the above serial number prefixes.
Action required
Previously unregistered APX for use with Sophos UTM (SG Series)
Verify that your APX has one of the serial number prefixes listed above.
If it does, for the APX to be recognized and managed by a Sophos UTM firewall, Sophos UTM OS must be upgraded to version 9.7 MR 11.
Previously unregistered APX for use with Sophos Firewall OS – SFOS (XG / XGS Series)
Verify that your APX has one of the serial number prefixes listed above.
If it does:
- The APX firmware is provided via a pattern update: version 11.0.019
- Important note: SFOS only stores the APX firmware if a slot is available. If the AP firmware installation is still pending for an earlier version, e.g., 11.0.018, the newly released firmware will not be available for installation. In this case, you must first install the earlier firmware, and then the pattern update will be upgraded in the firewall and be available for manual installation.
- In all cases, you will need to manually install this firmware.
- Installing the new firmware will require a brief downtime as any connected APX will be upgraded.
Note: Any new APX with one of the above serial number prefixes will only work with SFOS if the AP FW 11.0.019 or later is installed.
Sign up to the Sophos Support Notification Service to get the latest product release information and critical issues.