Today we've started to release UTM 9.500. The release will be rolled out in phases.
WAF URL Redirection gives you the ability to redirect traffic for a WAF protected URL to a different backend system or URL.
Configure minimum allowed TLS version to improve security.
WAF protection and authentication policy templates were added for common Microsoft services for protection and authentication.
True File Type Scanning to be able to block uploads based on MIME type.
WAF Proxy Protocol Support to use the client IP info inside the ProxyProtocol header to make policy decisions and improve logging.
Datacenter location selection for Sophos Sandstorm without relying on DNS based location detection.
Scan exceptions for Sophos Sandstorm to exclude specific filetypes from being sent to Sophos Sandstorm analysis.
RESTful API to configure Sophos UTM 9.
Certificate Expiration Notification 30 days before expiration date via WebAdmin and e-Mail to be able to react early on certificate renewal.
Support Access with SSH is extending the existing Support Access feature.
64-bit PostgreSQL Database to generate reports with big datasets faster. Existing database can be migrated (manually) without loosing any data.
SNMP Monitoring of full filesystem to integrate UTM filesystem monitoring in regular SNMP based monitoring solutions.
Download all UTM logs in a single archive.
While the release is in soft-release phase, you can find the up2date package on our FTP server at:
File size: ~301MB
ISO images can be downloaded at: https://www.sophos.com/en-us/support/utm-downloads.aspx
[Update 2017-05-09]: Today, the up2date is available via up2date servers in staging.
[Update 2017-05-11]: Added download links for ISO images
you can find the information in the KBA at community.sophos.com/.../126593
"Existing database can be migrated (manually) without loosing any data."
¿what are the procedures for this?
seeing dhcp service stoppping and connectivity is impacted. it does auto restart the service thou.
Does this release still use the ages-old-soon-deprecated Linux kernel 3.12?
My drive suddenly started thinking it was a raid drive so balked. I had to totally wipe the MBR to get the upgrade to work. The drive was once in a raid array years ago. So the system read that old flag in the MBR somewhere.