This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 9.6 to be____________________(plan to develop / beta / killed)

Hello!

Any one who could fill-up the blank in the subject. Please set aside the roadshow promises, I already know the roadshows of the last 2 years which never came up.

Or was the 9.5 unofficial obituary :(

This thread was automatically locked due to age.

Parents

JanWeber over 6 years ago

Hi All,

UTM 9.6 is currently in development, we are looking at a beta by the end of this month. So stay tuned for the beta announcement.

Regards,

Jan
Cancel
Vote Up 0 Vote Down

Cancel
HeineMadsen1 over 6 years ago in reply to JanWeber

Sooo.. we are near the end of the month now... any news to share?
Cancel
Vote Up 0 Vote Down

Cancel
twister5800 over 6 years ago in reply to HeineMadsen1

The AVANET link posted earlier shows this:

UTM 9.6:

Update July 25, 2018: IKEv2 has been removed from the roadmap.

Hopefully this is a mistake?!

-----

Best regards
Martin

Sophos XGS 2100 @ Home | Sophos v20 Technician
Cancel
Vote Up 0 Vote Down

Cancel
DouglasFoster over 6 years ago in reply to twister5800

Sounds like a bit of honesty.
Cancel
Vote Up 0 Vote Down

Cancel
twister5800 over 6 years ago in reply to twister5800

Was told yesterday from a reliable source, that IKEv2 will never come to the UTM, as XG is the way to go. It will certainly not come in 9.6 and 9.7 looks like it’s gonna be the last firmware for UTM…. (Not confirmed by Sophos...)

I understand the difficulties in having two firewall products running in parallel...but I promised a lot of my customers that UTM 9.6 would be ready for IKEv2, now I need to tell them to get a new/extra firewall...or pay for UTM --> XG Conversion

-----

Best regards
Martin

Sophos XGS 2100 @ Home | Sophos v20 Technician
Cancel
Vote Up 0 Vote Down

Cancel

Reply

twister5800 over 6 years ago in reply to twister5800

Was told yesterday from a reliable source, that IKEv2 will never come to the UTM, as XG is the way to go. It will certainly not come in 9.6 and 9.7 looks like it’s gonna be the last firmware for UTM…. (Not confirmed by Sophos...)

I understand the difficulties in having two firewall products running in parallel...but I promised a lot of my customers that UTM 9.6 would be ready for IKEv2, now I need to tell them to get a new/extra firewall...or pay for UTM --> XG Conversion

-----

Best regards
Martin

Sophos XGS 2100 @ Home | Sophos v20 Technician
Cancel
Vote Up 0 Vote Down

Cancel

Children

DouglasFoster over 6 years ago in reply to twister5800

Can someone briefly summarize the reasons why IKEv2 is needed, and the security or regulatory problems for IKEv1 connections. This is a topic I have not researched, but I assume IKEv2 was invented because of deficiencies in v1.
Cancel
Vote Up 0 Vote Down

Cancel

twister5800 over 6 years ago in reply to DouglasFoster

Well, from my point of view:

IKEv1 from Sophos UTM to ex. Azure is unstable with VPN Gateway and more difficult to maintain, because IKEv1 is Policy based and not Route based like IKEv2.

https://blog.webernetz.net/route-vs-policy-based-vpn-tunnels/

Azure VPN gateway:

Gateway SKUs by feature set

The new VPN gateway SKUs streamline the feature sets offered on the gateways:

SKU	Features
Basic (**)	Route-based VPN: 10 tunnels with P2S; no RADIUS authentication for P2S; no IKEv2 for P2S Policy-based VPN: (IKEv1): 1 tunnel; no P2S
VpnGw1, VpnGw2, and VpnGw3	Route-based VPN: up to 30 tunnels (*), P2S, BGP, active-active, custom IPsec/IKE policy, ExpressRoute/VPN coexistence

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices

-----

Best regards
Martin

Sophos XGS 2100 @ Home | Sophos v20 Technician

Ben over 6 years ago in reply to twister5800

or pay for UTM --> Another Vendor solution Conversion

---

Sophos UTM 9.3 Certified Engineer
Cancel
Vote Up 0 Vote Down

Cancel
twister5800 over 6 years ago in reply to Ben

Just released - some of it is good news - but keep in mind, XG is here to stay...:

https://martinsblog.dk/sophos-utm-9-6-is-coming-soon-with-more-on-the-way/

-----

Best regards
Martin

Sophos XGS 2100 @ Home | Sophos v20 Technician
Cancel
Vote Up 0 Vote Down

Cancel