This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Version 9.508 - report on experience

Version 9.508 is released:

https://community.sophos.com/products/unified-threat-management/b/utm-blog/posts/utm-up2date-9-508-released

Maybe we could collect some reports about problems or hopefully no problems. Maybe please tell us about the modules (Network, Web, WAF, Mail, WLAN..) you use if you successful updated to 9.508.

Best
Alex

P.S. With the production system, I'll wait a little bit ;-)

This thread was automatically locked due to age.

Parents

mapelo over 6 years ago

Moin,

ich habe bei zwei Kunden folgendes Problem:

Ich habe im MIME Type Filter unter SMTP -> Malware eingestellt, dass

application/vnd.ms-word.document.macroEnabled.12
application/vnd.ms-excel.sheet.macroEnabled.12
application/vnd.ms-powerpoint.presentation.macroEnabled.12

-Anhänge in die Quarantäne verschoben werden sollen.

Jetzt landen E-Mails in der Quarantäne, die diese Bedingung nicht erfüllen (Dateien docx + xlsx mit definitiv keinem Macro).

Gruß

Maik
Cancel
Vote Up 0 Vote Down

Cancel
agrestowa_kuna over 6 years ago in reply to mapelo

mapelo said:

Moin,

ich habe bei zwei Kunden folgendes Problem:

Ich habe im MIME Type Filter unter SMTP -> Malware eingestellt, dass

application/vnd.ms-word.document.macroEnabled.12
application/vnd.ms-excel.sheet.macroEnabled.12
application/vnd.ms-powerpoint.presentation.macroEnabled.12

-Anhänge in die Quarantäne verschoben werden sollen.

Jetzt landen E-Mails in der Quarantäne, die diese Bedingung nicht erfüllen (Dateien docx + xlsx mit definitiv keinem Macro).

Gruß

Maik

Yes, that! I've got the below implemented (Email protection -> SMTP -> Malware -> MIME Type Filter) and now all emails containing excel or word files are being pushed to quarantine.

application/vnd.ms-word.document.macroEnabled.12
application/vnd.ms-word.template.macroEnabled.12
application/vnd.ms-excel.sheet.macroEnabled.12
application/vnd.ms-excel.template.macroEnabled.12
application/vnd.ms-excel.addin.macroEnabled.12
application/vnd.ms-excel.sheet.binary.macroEnabled.12
application/vnd.ms-powerpoint.addin.macroEnabled.12
application/vnd.ms-powerpoint.presentation.macroEnabled.12
application/vnd.ms-powerpoint.template.macroEnabled.12
application/vnd.ms-powerpoint.slideshow.macroEnabled.12
application/vnd.ms-word.document.macroEnabled.main+xml
application/vnd.ms-word.template.macroEnabledTemplate.main+xml

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

agrestowa_kuna over 6 years ago in reply to mapelo

mapelo said:

Moin,

ich habe bei zwei Kunden folgendes Problem:

Ich habe im MIME Type Filter unter SMTP -> Malware eingestellt, dass

application/vnd.ms-word.document.macroEnabled.12
application/vnd.ms-excel.sheet.macroEnabled.12
application/vnd.ms-powerpoint.presentation.macroEnabled.12

-Anhänge in die Quarantäne verschoben werden sollen.

Jetzt landen E-Mails in der Quarantäne, die diese Bedingung nicht erfüllen (Dateien docx + xlsx mit definitiv keinem Macro).

Gruß

Maik

Yes, that! I've got the below implemented (Email protection -> SMTP -> Malware -> MIME Type Filter) and now all emails containing excel or word files are being pushed to quarantine.

application/vnd.ms-word.document.macroEnabled.12
application/vnd.ms-word.template.macroEnabled.12
application/vnd.ms-excel.sheet.macroEnabled.12
application/vnd.ms-excel.template.macroEnabled.12
application/vnd.ms-excel.addin.macroEnabled.12
application/vnd.ms-excel.sheet.binary.macroEnabled.12
application/vnd.ms-powerpoint.addin.macroEnabled.12
application/vnd.ms-powerpoint.presentation.macroEnabled.12
application/vnd.ms-powerpoint.template.macroEnabled.12
application/vnd.ms-powerpoint.slideshow.macroEnabled.12
application/vnd.ms-word.document.macroEnabled.main+xml
application/vnd.ms-word.template.macroEnabledTemplate.main+xml

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel

Children

Jens Feddersen over 6 years ago in reply to agrestowa_kuna

I have the same Problem since Update 9.508. What can we do?
Cancel
Vote Up 0 Vote Down

Cancel
Uwe Mietrasch over 6 years ago in reply to Jens Feddersen

We have also problems with s/mime:

- our outgoing emails are not signed (at all)

- our public key is not added to our outgoing emails

Decryption of received emails works.

Best,

UM
Cancel
Vote Up 0 Vote Down

Cancel
Uwe Mietrasch over 6 years ago in reply to Uwe Mietrasch

If we switch now back the the old version (community.sophos.com/.../131727)

we affraid, the Sophos is using the old DES instead of AES and also for Key Encryption Algorithm the old "rsaEncryption" than "RSAES-OAEP".

This could cause problems in communication for the EDI-Standard which is required in Germany.

Is someone of you using the sohos for "Marktkommunikation"?

www.bundesnetzagentur.de/.../Mitteilung_Nr_7.html
Cancel
Vote Up 0 Vote Down

Cancel
LuCar Toni over 6 years ago in reply to Uwe Mietrasch

Hi,

In fact, if you switch back to the old engine, you will using "old" 3DES.

Can you get in touch with an EDI company? As mention from other users here, it seems like all the requirement are postponed? But i am not sure...

Cheers

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel