Hello, my UTM total send a notification. Up2Date 9.717003 package description: Remarks: System will be rebooted Configuration will be upgraded News: Maintenance Release Bugfixes: Fix [NUTM-14362]: [Basesystem] Increase granularity…

It would appear that UTM 9.7 is vulnerable to CVE-2022-0778 as described in https://www.openssl.org/news/secadv/20220315.txt As I read the alert, it would appear that this has severe impact for all the older OpenSSL releases like are being used on the…

Hello, I am new to the community and am is looking forward to learning for others, especially about phishing. Thanks

Ok, so how specifically do I ' set the corresponding intrusion protection rule to "drop" in WebAdmin ' per the alert email below I received? There is no 'rule' identified in the alert. Am I supposed to infer that 58442 in the snort link is the rule…

The list of CVEs concerning bugs in the linux kernel is steadily growing, but the rate of updates we're getting for the UTM is in steady decline. I know that UTM can be considered a dying horse, but nevertheless this thing is still supported and should…

Today Cisco pulished this advisory_ https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ethernet-dos-HGXgJH8n It seems UTM uses an affected version of Snort also: gate:/ # /var/sec/chroot-snort-29112-01/sbin/snort…

Hello, some time ago I get messages from my UTM9 like these two following 2018:05:09-07:53:21 lyra snort[17243]: id="2101" severity="warn" sys="SecureNet" sub="ips" name=" Intrusion protection alert " action="drop" reason=" EXPLOIT-KIT Rig Exploit…

Hello, First, sorry for my english, you know french guys don't speaks correctly english x) .... I have an alert on Sophos UTM 9 in network protection Advanced threat protection : ip source : (my server DNS) adresse ip de destination : mrdistrupd…

I am new to this and just finding my way around setting up utm/firewalls i have a 2 firewall setup an internal sophos utm 9 ffirewall and an external firewall The internal firewall sophos utm 9 is setup where all computers and mobile devices are behind…

I'm not a network guy so please forgive me if this is a simple answer. We have to be PCI compliant. We passed the network scan last year, and failed this year with this report: TCP 2323 - Unencrypted Communication Channel Accessibility. Description…