We've just released UTM version 9.713. As usual, the release will be rolled out in phases:

Details of this release, along with previous releases, can be found on our official release notes page.

Other news

  • Maintenance Release
  • Security Release


  • System will be rebooted
  • Configuration will be upgraded

Issues Resolved

  • NUTM-13682 [Email] Post-auth SQLi in Quarantine Manager (CVE-2022-3345)
  • NUTM-13475 [WAF] High CPU usage by rrdtool due to daylight saving time changes

Important notice - 32 bit mode and the Avira scan engine

The most significant change in this release is the switch of several additional components to run in full 64-bit mode on 64-bit kernels.

Starting with this release, the following services run in 64-bit mode by default for all customers running the 64-bit kernel:

  • HTTP proxy
  • Sophos and Avira scan engines
  • Snort

One reason for this change is that Avira have announced the end of support for 32-bit versions of their scan engine. If you are using the Avira scan engine in your UTM configuration, you should update to 9.713 as soon as possible. Consult the following article for more information: Sophos NSG: End of Support for Avira 32-bit Scan Engine

For customers running the 32-bit kernel, the 32-bit versions of these services will continue to be installed and used in version 9.713 and beyond. However, the Avira Scan Engine will no longer provide the same levels of protection after their end of support date. You can see which kernel version you are using in the footer of the Webadmin screen:

CPUs that only support 32-bit mode are now over ten years old. It will become harder for us to continue to support key components in 32-bit mode going forward. We suggest that if you are currently running with a 32-bit kernel you consider upgrading your installation with new hardware, or by reimaging your current hardware with a SG UTM ISO image and selecting 64-bit mode during installation.