Up2Date 9.406003 package description:
Remark: System will be rebooted
News: Security Release
Bugfixes: Fix [NUTM-1616]: [AWS] Change AMI type to HVM Fix [NUTM-4839]: [AWS] AWS Instances in GovCloud need to use S3 buckets in GovCloud Fix [NUTM-5013]: [Network] TCP Vulnerability (CVE-2016-5696)
RPM packages contained: perf-tools-3.12.48-0.237935773.g86aa827.i686.rpm ep-ha-aws-9.40-191.g83c01f2.rb1.noarch.rpm ep-webadmin-9.40-640.g7ad4baa.rb8.i686.rpm ep-cloud-ec2-9.40-26.g00cde1e.rb2.i686.rpm kernel-smp-3.12.48-0.237935773.g86aa827.i686.rpm kernel-smp64-3.12.48-0.237935773.g86aa827.x86_64.rpm ep-release-9.406-3.noarch.rpm
Does not look like the DHCP MTU issue is fixed though?!
Anyone have heard of it?
Best regards Martin ;-)
Sophos UTM Certified Engineer 9.5Sophos XG Certified Engineer 17.1Homelab: 1 x SG210 XG v18 - 3xAPX530 - 1 x SG210 v9.7 - 1 x UTM 220 v9.7 - 1 x SG135 v9.7 (All Fullguard Plus licenses)
I just tested it and I can confirm it was not fixed.
Sad to hear that...
Really unacceptable from Sophos. Over a month later a still no patch and just one comment that they are working on it? Why couldn't they revert the change in the patch they released?
As others have said even tho we are home users the issue has been affecting licensed business users as well and it seems they really don't care.
Lets not mention the installer still has misnamed RPM packages it appears they haven't fixed that as well and that issue has been going on for a LONG time.
Just poor from a supposed enterprise software company. To me it seems like amateur hour special.
Anybody have suggestions for a competitor product?
I am one of those paying business customers and I have to say that I am increasingly disappointed with Sophos' ability to address bugs and the quality control aspect of patching. I now have 4 up2dates waiting to be installed because one is there to fix the previous and introduces a new problem and there still isn't a fix for the MTU issue.
I have had alot of customers with this issue. The MTU gets set at 576 on the external interface when DCHP is set as the connection method. As you can image, this causes a range of network related problems . Changing the MTU manually drops the connenction altogether.
The solution for me (not ideal) is to roll back to a previous firmware version.
I really hope Sophos fix this soon as im a little over rolling back to previous firmware.