Sophos UTM 9

So, if you are on 9.710 then have your users been updated to the Sophos Connect client?  As of 9.710, you can't get the old SSL client from the User Portal any longer.  If they haven't been updated to the Sophos Client, it's recommended to update them.  That would be your only real SSL VPN issue. You can still use the old client for now, but you should have a plan to update them.  Current version is 2.2.90 I believe.

Are your UTMs configured in high availability?  Or are they at just two different offices an your users connect to one or the other?

Hi Amodin, 

at the moment all my two firewalls still running on version 9.710-1 also ssl vpn users still using the same version, my utm’s are not configured as high availibility, they are only connected from different sites using ip sec, so i have worries if i finished update of two sites to lose ip sec connection and ssl vpn users connection

Hi Amodin, 

at the moment all my two firewalls still running on version 9.710-1 also ssl vpn users still using the same version, my utm’s are not configured as high availibility, they are only connected from different sites using ip sec, so i have worries if i finished update of two sites to lose ip sec connection and ssl vpn users connection

You'll lose IPsec connectivity when they reboot for the updates at that specific UTM connection, that's it.  The updates don't wipe out configurations (but always get backup before, Murphy's law and all).

You could update one, then the other, but I would recommend updating one, let it reboot/check to verify it's up, then updating the second one, then let it reboot/verify.  Rinse, repeat until updated to 9.714.  Sophos recommended to also install the updates in order, and not just jump from 9.710 directly to 9.714 (in the announcement information I believe).

This way, after you update the first one, you can verify its up and working, then you can update the second one and confirm.  If you run into an issue, you can pause any progress until an issue is fixed, then move on.

The updates are pretty seamless and have been flawless for me and several others.

Thank you for your support. I have one more question about ssl vpn users after update finished they will use the old configuration file

The .ovpn file should not change at all either.  Sophos Connect client uses that same file unless you change something.  Part of the update, reboot and test would be to also see that your VPN profile connects as it did.  I would add that to the recommendation.  If you have a VPN account on both UTMs, check them both after each update, but should not have any affect by the updates.

Ok, thank you for your support