Sophos UTM Accelerated 9.2 Soft Release Available
I am very pleased to announce that after many months of research, development, and testing, we have just released Sophos UTM 9.2. This is a significant update to the Sophos UTM product and brings over 100 new features such as Advanced Threat Protection, SPX Email Encryption and DLP, Two-Factor Authentication and an array of new web features much too long to list here. There have been a number of changes to significantly improve IPS performance, no matter which deployment method you use. Also, we’ve added reverse proxy authentication to our Webserver Protection, making us the perfect replacement for Microsoft TMG.
The full "GA" release is planned to start at the beginning of April when the push of 9.200 will begin appearing in running installations via our normal Up2Date service. Until then, we will closely monitor this thread up until the worldwide release. Our personal thanks go to all the beta testers who have already, and continue to support us with this release!
What is a soft release?
This is the package we intend to release for GA, however, we occasionally make small adjustments and fix some additional bugs between now and the GA push. Soft releases are considered production-ready and not beta releases, however soft release Up2Dates can only be installed by downloading them manually to your PC and uploading them via WebAdmin, or installing the Soft Release ISO on your hardware/software and restoring a backup file from your existing UTM.
Full release notes, an official Up2Date blog post, some tweaked documentation, and other details will be finalized and communicated with the release of the GA version, for now, if you'd like to get on with installing the 9.2 release, full details can be found below. We have Up2Dates from the latest stable version of UTM, (Beta testers have an Up2Date being pushed to them already), and ISO images for Software and Hardware appliances. Other release packages, such as the Smart Installer Images, will come with the GA push.
-On behalf of all our staff who worked on 9.200, we'd like to thank you for making this release our best UTM version ever. Enjoy!
(I'll post the download links first so you can begin...the package details follow.)
UTM Up2Date 9.109 to 9.200
Link: ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.109001-200011.tgz.gpg
Size: ~309MB
MD5: ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.109001-200011.tgz.gpg.md5
UTM 9.200 Hardware ISO (for official appliances)
Link: ftp://ftp.astaro.de/UTM/v9/hardware_appliance/iso/ssi-9.200-11.1.iso
Size: ~614MB
MD5: ftp://ftp.astaro.de/UTM/v9/hardware_appliance/iso/ssi-9.200-11.1.iso.md5
UTM 9.200 Software ISO (for your own hardware or virtual environment)
Link: ftp://ftp.astaro.de/UTM/v9/software_appliance/iso/asg-9.200-11.1.iso
Size: ~611MB
MD5: ftp://ftp.astaro.de/UTM/v9/software_appliance/iso/asg-9.200-11.1.iso.md5
Sophos UTM v.9.200011
News
Update to 9.200
Major Features
• Web: New UI policy model
• Mail: SPX encryption support
• Mail: DLP support
• Network: Botnet/C&C traffic detection and blocking
• Network: Major IPS performance improvements
• Authentication: Dual-factor authentication with OATH TOTP
• WAF: Authentication support
Smaller Features
• Web: AD SSO in transparent mode
• Web: Warn action
• Web: Transparent HTTPS filtering w/o full SSL scanning
• Web: URL categorization override
• Web: PUA blocking
• Web: Enhanced log search
• Web: Policy tester
• Web/Endpoint: Web Control for SEC-managed endpoints
• Endpoint: Proxy support for LiveConnect
• Wifi: Hotspot: Fully customizable login page
• Wifi: Hotspot: Fully customizable vouchers
• Wifi: Hotspot: New hotspot type with authentication against UTM/Backends
• RED: optional tunnel compression
• RED: RED50: improve LCD output
• RED: RED50: VLAN configuration for switch ports
• WAF: Extended threat filtering
• WAF: Fallback hosts
• WAF: HTTP to HTTPS redirection
• Network: Support more DynDNS providers
Remarks
• System will be rebooted
• Configuration will be upgraded
• Connected Wifi APs will perform firmware upgrade
• Connected RED devices will perform firmware upgrade
Bugfixes
• 17609 User Portal: whitelist is completely ignored if blacklist matches
• 22646 Bridge: Use the MAC address of the converted interface instead of the smallest one
• 23810 System & UTM Backups ignore backup limits
• 23950 Wildcard Domains for SMTP Routing (Regression)
• 24127 Full NAT from internal network to external address dropped on bridge interface
• 24331 [UBB][9.070] Mail Notification contain antivirus footer
• 24358 Manual speed settings have no effect on HA link
• 24652 Wireless: Client is listed on wrong AP in Webadmin "Wireless status"
• 24739 cluster SMTP distribution not working
• 25199 Kernel Oops when lowering MTU for USB netcard
• 25476 Increase default WebAdmin logout time (for new installations)
• 25676 [UBB][9.100] Executive Report - Wrong charts displayed on Apple Devices
• 25952 Country blocking exception doesn't work
• 26225 Damaged graphic in the wireless reporting in French language
• 26544 DNS host definitions with non-ascii chars and underscore cause dns-resolver to fail
• 26640 Not possible to activate more than 62 virtual webserver
• 27742 Standard mode in deployment helper incorrectly named
• 28150 Sophos Authentication Agent does not work with MacOS X 10.6
• 28201 User Portal webpage doesn't get fully loaded while using Internet Explorer
• 28383 SSL VPN disconnects when transferring large amounts of data
• 28866 Essential Firewall: Not possible to use HA reserved interface eth3
• 29354 [Update Rule:] SSL VPN routes are not distributed correctly over OSPF
• 29584 "Department Reports" in Web Sec Reporting does not work for host objects
• 30016 Mix SSL and WAF and SharePoint 2013 will no longer allow you to save files (file is opened
This thread was automatically locked due to age.
