What is going on - 3 month without any update on the UTM

No you haven't missed anything.  UTM 9.6 development is in the works, with beta initially planned for June they obviously missed that deadline. 

Unfortunately the bulk of development resources is towards their XG SFOS as Sophos sees that as the future of their Firewall/UTM products.

It seems Sophos simply wants to kill UTM :(

XG is so immature at the moment - many features missing.

Also, they made many features from standard UTM as a paid extra in free XG.

who needs updates or information on a security product? yes right.. 

our renewals are approaching in early 2020, XG is out of the question and if updates are getting this rare sophos will not get our money this time.

In the past the featureset of UTM is what we are interested in (mail mta, vpn/site2site), we allready implemented a new security product against attacks and security threats. Its really a pity that UTM is not getting the same care it used to have anymore and at the end of the day the question is if its still worth the costs of the subscription. 

Update finally released

https://community.sophos.com/products/unified-threat-management/b/utm-blog/posts/utm-up2date-9-510-released

Today we've released UTM 9.510. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

Link to download manually here.

ftp://ftp.astaro.com/pub/UTM/v9/up2date/

Up2Date Information

News

• Maintenance Release

Remarks

• System will be rebooted
• Configuration will be upgraded
• Connected APs will perform firmware upgrade
• Connected REDs will perform firmware upgrade

Bugfixes

• NUTM-8273 [Basesystem] Inconsistent reporting data in hot standby environment
• NUTM-9089 [Basesystem] ulogd restarting randomly
• NUTM-9423 [Basesystem] Missing DMI info or missing WiFi card should turn status LED red for desktop refresh models
• NUTM-9516 [Basesystem] CVE-2017-3145: BIND vulnerability
• NUTM-9764 [Basesystem] multiple NTP vulnerabilities
• NUTM-9862 [Basesystem] CVE-2018-8897: Don ‘t use IST entry for #BP stack
• NUTM-9944 [Basesystem]  ‘ethtool -p ‘ is not working for shared port
• NUTM-9945 [Basesystem] SG/XG 125/135 upper 4 ports LEDs at front and rear side not behaving as expected
• NUTM-9286 [Email] CVE-2011-3389: SSL/TLS BEAST Vulnerability And Weak Algorithms
• NUTM-9460 [Email] Quarantine unscannable and encrypted content not working as expected
• NUTM-9539 [Email] SMTP callout with TLS does not work
• NUTM-9627 [Email] Parent proxy for WAF (ctipd) not applied without active e-mail subscription
• NUTM-9771 [Email] Redesign TFT detection to decrease false positives/negatives
• NUTM-9836 [Email] HSTS usage breaks Quarantine Report release link
• NUTM-9789 [Logging] Not able to archive logs using SMB share
• NUTM-8969 [Network] Inconsistent DHCP leases in WebAdmin
• NUTM-9049 [Network] Cannot change IPv4 interface as IPv6 gateway is required
• NUTM-9194 [Network] Static route switching to different VLAN
• NUTM-9646 [Network] eth0 is falsely marked  “dead “ when running  “hs “ on slave
• NUTM-9739 [Network] Network monitor restarting on slave nodes
• NUTM-9795 [RED] RED50 issue with large packets in Transparent/Split mode
• NUTM-9607 [Reporting] Upper case umlauts in PDF Executive Reports are not displayed correctly
• NUTM-9624 [Reporting] WAF - Top attackers won ‘t be displayed after upgrade to v9.5
• NUTM-9719 [SUM] Web Protection service shown as down in SUM
• NUTM-9547 [UI Framework] UserPortal does not correctly detect browser specified preferred language for Chinese Simplified
• NUTM-9527 [WAF] Fix mod_url_hardening stack corruption
• NUTM-8038 [WebAdmin] WebAdmin not available
• NUTM-9232 [WebAdmin] Sometimes  ‘backend connection failed ‘ while login
• NUTM-9529 [WebAdmin] Role with  ‘Web Protection Manager ‘ rights can ‘t access Aplication Control
• NUTM-9689 [WebAdmin] Report Auditor role is unable to open the dashboard
• NUTM-5293 [Web] Google is missed in the Search Engines reports
• NUTM-6240 [Web] FTP download through HTTP Proxy in standard mode not possible
• NUTM-9039 [Web] Connections may fail when using upstream proxies due to  “Proxy-Connection “ header being sent
• NUTM-9399 [Web] Classification for Windows Updates differs between AFC and conntrack
• NUTM-9413 [Web] Unable to upload certificate to  “Local Verification CAs “
• NUTM-9491 [Web] HTTP Proxy coredumps with SIGABRT
• NUTM-9549 [Web] Proceeding after content warning results in display issues on redirected pages
• NUTM-9599 [Web] HTTP Proxy requests stuck without appropriate timeout
• NUTM-9630 [Web] Fallback log flooded with samlogon cache timeout messages
• NUTM-9664 [Web] Country blocking exception not working when HTTP Proxy is using SSO
• NUTM-9720 [Web] Can ‘t proceed content warning for MIME types if URL contains spaces
• NUTM-9745 [Web] HTTP Proxy coredumps with SIGSEGV
• NUTM-7628 [Wireless] Wireless clients frequently failing to connect with STA WPA failure reason code 2
• NUTM-8946 [Wireless] APs displayed as inactive in WebAdmin while clients can connect
• NUTM-9591 [Wireless] Both local WiFi using 2.4GHz band and same channel in default configuration
• NUTM-9592 [Wireless] Unable to broadcast same SSID on both LocalWifi0 and LocalWifi1
• NUTM-9594 [Wireless] Incorrect channel information showing on overview for LocalWifi
• NUTM-9608 [Wireless] Incorrect generic error message in WebAdmin while configuring band for wireless network
• NUTM-9638 [Wireless] Both local WiFi AP named  ‘Local ‘
• NUTM-9731 [Wireless] Not able to configure channel 12 and 13 on newer desktop models
• NUTM-9735 [Wireless] Set default channel width to 40MHz for 5GHz band
• NUTM-9737 [Wireless] SGw appliances missing frequency definitions for Nigeria

Note that there seem to be some issues with 9.510: Sophos UTM 9.510-4 released - let's share experiences!

Cheers - Bob