Thread Info
  • Locked Locked
  • Replies 51 replies
  • Subscribers 25 subscribers
  • Views 78090 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Version 9.508 - report on experience

Alexander Busch

Version 9.508 is released:

https://community.sophos.com/products/unified-threat-management/b/utm-blog/posts/utm-up2date-9-508-released

Maybe we could collect some reports about problems or hopefully no problems. Maybe please tell us about the modules (Network, Web, WAF, Mail, WLAN..) you use if you successful updated to 9.508.

Best
Alex

P.S. With the production system, I'll wait a little bit ;-)



This thread was automatically locked due to age.
Parents

  • Moin,

     

    ich habe bei zwei Kunden folgendes Problem:

     

    Ich habe im MIME Type Filter unter SMTP -> Malware eingestellt, dass 

    application/vnd.ms-word.document.macroEnabled.12
    application/vnd.ms-excel.sheet.macroEnabled.12
    application/vnd.ms-powerpoint.presentation.macroEnabled.12

    -Anhänge in die Quarantäne verschoben werden sollen.

    Jetzt landen E-Mails in der Quarantäne, die diese Bedingung nicht erfüllen (Dateien docx + xlsx mit definitiv keinem Macro).

     

    Gruß

    Maik

  • in reply to mapelo

    mapelo said:

    Moin,

     

    ich habe bei zwei Kunden folgendes Problem:

     

    Ich habe im MIME Type Filter unter SMTP -> Malware eingestellt, dass 

    application/vnd.ms-word.document.macroEnabled.12
    application/vnd.ms-excel.sheet.macroEnabled.12
    application/vnd.ms-powerpoint.presentation.macroEnabled.12

    -Anhänge in die Quarantäne verschoben werden sollen.

    Jetzt landen E-Mails in der Quarantäne, die diese Bedingung nicht erfüllen (Dateien docx + xlsx mit definitiv keinem Macro).

     

    Gruß

    Maik

     

     

    Yes, that! I've got the below implemented (Email protection -> SMTP -> Malware -> MIME Type Filter) and now all emails containing excel or word files are being pushed to quarantine. 

     

    application/vnd.ms-word.document.macroEnabled.12
    application/vnd.ms-word.template.macroEnabled.12
    application/vnd.ms-excel.sheet.macroEnabled.12
    application/vnd.ms-excel.template.macroEnabled.12
    application/vnd.ms-excel.addin.macroEnabled.12
    application/vnd.ms-excel.sheet.binary.macroEnabled.12
    application/vnd.ms-powerpoint.addin.macroEnabled.12
    application/vnd.ms-powerpoint.presentation.macroEnabled.12
    application/vnd.ms-powerpoint.template.macroEnabled.12
    application/vnd.ms-powerpoint.slideshow.macroEnabled.12
    application/vnd.ms-word.document.macroEnabled.main+xml
    application/vnd.ms-word.template.macroEnabledTemplate.main+xml

     

    Thanks!

  • in reply to agrestowa_kuna

    I have the same Problem since Update 9.508. What can we do?

     

  • in reply to Jens Feddersen

    We have also problems with s/mime:

    - our outgoing emails are not signed (at all)

    - our public key is not added to our outgoing emails

    Decryption of received emails works.

    Best,

    UM

  • in reply to Uwe Mietrasch

    If we switch now back the the old version (community.sophos.com/.../131727)

    we affraid, the Sophos is using the old DES instead of AES and also for Key Encryption Algorithm the old "rsaEncryption" than "RSAES-OAEP".

    This could cause problems in communication for the EDI-Standard which is required in Germany.

    Is someone of you using the sohos for "Marktkommunikation"?

    www.bundesnetzagentur.de/.../Mitteilung_Nr_7.html

  • in reply to Uwe Mietrasch

    Hi,

     

    In fact, if you switch back to the old engine, you will using "old" 3DES.

    Can you get in touch with an EDI company? As mention from other users here, it seems like all the requirement are postponed? But i am not sure...

     

    Cheers

    __________________________________________________________________________________________________________________

Reply
  • in reply to Uwe Mietrasch

    Hi,

     

    In fact, if you switch back to the old engine, you will using "old" 3DES.

    Can you get in touch with an EDI company? As mention from other users here, it seems like all the requirement are postponed? But i am not sure...

     

    Cheers

    __________________________________________________________________________________________________________________

Children
No Data
Unfiltered HTML