Any comments from Sophos regarding WPA2 may be cracked by KRACK (Key Reinstallation AttaCK)

Patch Release have been announced: https://community.sophos.com/products/sophoswireless/f/questions-issues-bugs/97112/update-on-kracks-patches-for-sophos-products

Cheers,

Karlos

Patch Release have been announced: https://community.sophos.com/products/sophoswireless/f/questions-issues-bugs/97112/update-on-kracks-patches-for-sophos-products

Cheers,

Karlos

Karlos, can you have whoever put up that article list the actual firmware version that is fixed for Cloud Wireless and XG?  Kind of a guessing game without that info.

Hey BrucekConvergent 

I've updated version numbers for UTM & Central. I will update the information for XG once I receive the information from our Wireless team.

Thanks,
Karlos

I downloaded and installed the new firmware for both RED and AP.

I believe that is not the end of it, I still need to make sure my phone/tables etc etc also get patched, is that correct?

Thanks

Yes your clients should also update -- the AP / RED updates mitigate this attack when attaching to Sophos-managed SSIDs, but when you're in the wild, the client should be patched as well.  Microsoft already released patches in their October update ... I don't have any clients with Macs (at least that I manage) so I'm not sure when or if they have already patched their gear.  Android... who knows... come of the carriers are slow to push updates.

Carlos, any update on which version firmware for XG is patched?  The KB article still does not list it.

Hey Bruce,

v17 is now released and includes KRACK patch. Blog has been updated: https://community.sophos.com/products/sophoswireless/f/questions-issues-bugs/97112/update-on-kracks-patches-for-sophos-products

Cheers,
Karlos

How about customers still on 16.5?  A lot are going to wait a while until 17 has gone thru at least one MR release... the firmware is separate on XG from the Wireless firmware... what version of Wireless Firmware on XG 16.5 is patched?