Hi Everyone,

Today we've released UTM 9.506. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

• Maintenance Release

• System will be rebooted
• Connected APs will perform firmware upgrade
• Connected REDs will perform firmware upgrade

• NUTM-8651 [AWS] AWS Permission…

Hi Everyone,

Today we've released UTM 9.415. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

• Security Release

• System will be rebooted
• Connected APs will perform firmware upgrade

• NUTM-8987 [Basesystem] System doesn't boot if Posgtresql database cannot start…

Hi Everyone,

Today we've released UTM 9.505. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

• Security Release

• System will be rebooted
• Connected APs will perform firmware upgrade
• Connected REDs will perform firmware upgrade

• NUTM-8984 [RED] WPA2 KRACK vulnerability…

Hi Everyone,

Today we've released UTM 9.504. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

• Security Release

• System will be rebooted
• Configuration will be upgraded
• Connected REDs will perform firmware upgrade

• NUTM-8851 [Basesystem] System doesn't boot if…

Hi Everyone,

We've just released SUM 4.306 to the Up2Date servers. This is a full GA release, meaning that this update will be offered to all SUM devices automatically.

• Maintenance Release

• System will be rebooted

• NSU-245 [accd] SUM  is accepting weak ciphers on port 4433 which fails PCI compliance scan
• NSU-253 [basesystem] BIND Vulnerability for CVE-2017-3136, CVE-2017-3137…

Hi Everyone,

Today we've released UTM 9.503. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

Update 2017-08-25: Unfortunately the update package has an issue with a missing config file for Samba and we needed to pull the update package down from the FTP server. We are working on a replacement urgently.

We're excited to announce that we've just released Sophos UTM 9.501 on AWS. Along with all the great functionality introduced in Sophos UTM 9.5, we've added three new features specifically designed for our customers in AWS. The new features are the AWS Management Menu, S3 Polling, and Security Group Management.

AWS Management Menu

We've released a lot of features for customers using UTM in AWS, including our…

Hi Everyone,

Today we've released UTM 9.502. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

IMPORTANT: The re-join workaround is required after upgrading from 9.501 to 9.502. See: https://community.sophos.com/kb/en-us/126819

[Edit 2017-07-17]: Moved workaround into a KBA.

[Edit 2017-07-18]: Release is…

Today we've released UTM 9.414. The release is now available for all via Up2Date servers.

• Maintenance Release

• System will be rebooted

• NUTM-6646 [AWS, REST API] REST API panic when unlocking unlocked mutex
• NUTM-6887 [AWS, REST API] REST API panic when inserting into node which is not of type array
• NUTM-7173 [AWS, REST API] [RESTD] Selfmon cannot (re)start restd
• NUTM-6708…

Today we've released UTM 9.501. The release is now available for all via Up2Date servers.

[Update]: This release contains all relevant fixes from UTM 9.414.

• Maintenance Release

• System will be rebooted
• Configuration will be upgraded
• Connected REDs will perform firmware upgrade
• Connected Wifi APs will perform firmware upgrade

• NUTM-6868 [AWS, REST API] Missing trailing slash…

Hi Everyone,

Today we've started to release UTM 9.500. The release will be rolled out in phases.

• In phase 1 you can download the update package from our FTP server.
• In phase 2 we will make it available via our Up2Date servers in several stages.
• In phase 3 we will make it available via our Up2Date servers to all remaining installations.

• WAF Enhancements

WAF URL Redirection gives you the…

Hi Everyone,

Today we've released UTM 9.413. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

[Update 2017-05-02]: Release is now available for all via Up2Date servers.

• Maintenance Release

• System will be rebooted

• NUTM-7586 [Web] Chrome v58 and higher fail…

Hi Everyone,

We've just released 9.412 to the Up2Date servers. This is a full GA release, meaning that all firewalls will be offered the automatic update.

• Maintenance Release

• System will be rebooted

• NUTM-7483 [Basesystem] BIOS Update

• NUTM-7564 [SUM] RED Link state is shown wrong in Gateway Manager

Hi Everyone,

We've just released SUM 4.305 to the Up2Date servers. This is a full GA release, meaning that this update will be offered to all SUM devices automatically.

• Maintenance Release

• System will be rebooted

• NSU-220 [accd] MSP License deployment failed for multiple customers
• NSU-237 [basesystem] SUM: BIND vulnerarability CVE-2016-2776
• NSU-238 [basesystem] SUM: BIND…

Sophos UTM 9.411 for both Stand Alone and Auto Scaling releases is now available on the AWS Marketplace. With this release, we've introduced three new features that have been big asks from our customers.

First, our Auto Scaling release now supports ELB Proxy Protocol, which allows customers to identify, report, and create rules based on end client IP addresses. Second, we've added all UTM logs to the CloudWatch…

You may have heard some of the news circulating on product quality issues with Intel’s Atom C2000 series chips. Sophos uses Intel Atom C2000 processors in a small subset of XG and SG-series hardware, specifically the XG/SG 125 and XG/SG 135 models (all variants).  We are working closely with Intel to determine the extent to which Sophos products may or may not be affected by the Atom C2000 issue. If deployed XG/SG…

Hi Everyone,

We've just released 9.411 to the Up2Date servers. This is a full GA release, meaning that all firewalls will be offered the automatic update.

• Maintenance Release

• System will be rebooted
• Configuration will be upgraded

• NUTM-6804 [AWS] Update breaks HVM standalone installations
• NUTM-6747 [Email] SAVI scanner coredumps permanently in MailProxy after update to…

Hi Everyone,

We've just released 9.410 to the Up2Date servers. This is a full GA release, meaning that all firewalls will be offered the automatic update.

• Maintenance Release

• System will be rebooted
• Configuration will be upgraded
• Connected REDs will perform firmware upgrade
• Connected Wifi APs will perform firmware upgrade

• NUTM-534 [AWS] Template update notification
• NUTM…

Sophos UTM 9.409 for Stand Alone UTMs is now available on the AWS Marketplace. With this release, we've introduced support for Hardware Virtual Machines (HVM) which allows customers to deploy Sophos UTM in newer AWS regions like London, Canada Central, Ohio, and Mumbai. We've also introduced a new conversion utility that allows customers to convert the Stand Alone UTM (Single AMI) into High Availability UTM (cold and…

Hello,

Please be aware of the following two articles which detail issues with Cisco VPN and RED 10 devices after upgrading to UTM 9.409.

1. Sophos UTM: traffic over Cisco VPN with iOS devices is dropped after updating to version 9.409.

2. Sophos UTM: upgrading to 9.409 causes RED 10 devices with static WAN configs to go offline.

Thank you,

Bob

Hi Everyone,

We've just released 9.409 to the Up2Date servers. This is a full GA release, meaning that all firewall running will be offered the automatic update.

News

• Maintenance Release

Remarks

• System will be rebooted
• Configuration will be upgraded
• Connected REDs will perform firmware upgrade
• Connected Wifi APs will perform firmware upgrade

Bugfixes

• NUTM-2392 [AWS] Allow…

Hi Everyone,

We've just released 9.358 to the Up2Date servers. This is a full GA release, meaning that all firewall running will be offered the automatic update.

News

• Security Update

Remarks

• System will be rebooted
• Configuration will be updated
• Connected RED devices will perform firmware upgrade
• Connected WiFi APs will perform firmware upgrade

Bugfixes

• NUTM-5067 [Access & Identity] Patch RED15(w) against Off…

We’re excited to announce the release of UTM 9.408 on Amazon Web Services (AWS). This release has bug fixes as part of the regular UTM release, but we’ve also developed a couple of new features including a RESTful API and support for AWS GovCloud.

RESTful API for Sophos UTM

Sophos UTM now allows you to automate tasks by calling a RESTful API, which can then take actions on your part. For example, you can create…

Hi Everyone,

We've just released 9.321 to the Up2Date servers. This is a full GA release, meaning that all firewall running will be offered the automatic update.

News

• Security Release

Remarks

• System will be rebooted

Bugfixes

• NUTM-5477 [Basesystem] OpenSSL security update (1.0.1u) [9.3]
• NUTM-5480 [Basesystem] BIND Security update (CVE-2016-2776) [9.3]
• NUTM-5051 [Network] TCP Vulnerability (CVE-2016-5696) [9.3…

Hi Everyone,

We've just released 9.408 to the Up2Date servers. This is a full GA release, meaning that all firewall running will be offered the automatic update.

News

• Maintenance Release

Remarks

• System will be rebooted

• Configuration will be upgraded

• Connected REDs will perform firmware upgrade

Bugfixes

• NUTM-5349 [AWS] Restore fails if UTM is created with backup file in user data
• NUTM-5466 [AWS] ssh disabled…