Thread Info
  • Locked Locked
  • Replies 41 replies
  • Subscribers 15 subscribers
  • Views 68792 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM 9.406-3 released

twister5800


Up2Date 9.406003 package description:

Remark:
System will be rebooted

News:
Security Release

Bugfixes:
Fix [NUTM-1616]: [AWS] Change AMI type to HVM
Fix [NUTM-4839]: [AWS] AWS Instances in GovCloud need to use S3 buckets in GovCloud
Fix [NUTM-5013]: [Network] TCP Vulnerability (CVE-2016-5696)

RPM packages contained:
perf-tools-3.12.48-0.237935773.g86aa827.i686.rpm
ep-ha-aws-9.40-191.g83c01f2.rb1.noarch.rpm
ep-webadmin-9.40-640.g7ad4baa.rb8.i686.rpm
ep-cloud-ec2-9.40-26.g00cde1e.rb2.i686.rpm
kernel-smp-3.12.48-0.237935773.g86aa827.i686.rpm
kernel-smp64-3.12.48-0.237935773.g86aa827.x86_64.rpm
ep-release-9.406-3.noarch.rpm



This thread was automatically locked due to age.
Parents Reply Children
  • in reply to RyanDougherty

    Thanks Ryan,

    That it did.  I switched it back to 1500 to no avail.


    EDIT: I see there is more to it than changing it in the GUI.  I'll wait for an update (unless there is a better solution).  I'm still doing my research on this based on the MTU problem.

  • in reply to korgull

    From what I saw, it involved SSH.

  • in reply to RyanDougherty

    RyanDougherty said:

    From what I saw, it involved SSH.

    Yeah.. I tried what was described in https://community.sophos.com/products/unified-threat-management/f/52/t/79288  

    Unfortunately, that didnt help.  My MTU stays at 1500, but the WAN still stays down (even after issuing an ifconfig eth1 down, then ifconfig eth1 up).

    Reboot didnt help either..

    Thanks

  • in reply to korgull

    I followed those instructions for a dynamic Comcast line and luckily it worked great.

    I may still reload with the previous release though because I prefer not to hack the OS.

    As a Sophos Partner, it's disappointing indeed but they still make the best security products for our customers.

    This is exactly why we don't update firewalls right away unless a fix is absolutely needed.

  • in reply to RaZor

    RaZor said:

    I followed those instructions for a dynamic Comcast line and luckily it worked great.

    I may still reload with the previous release though because I prefer not to hack the OS.

    As a Sophos Partner, it's disappointing indeed but they still make the best security products for our customers.

    This is exactly why we don't update firewalls right away unless a fix is absolutely needed.


    Good advice.  I'll try again and maybe it will work this time.  I thought that all I had to do was take out the mtu part from the config file and restart the interface.  I'll read it again and try soon.

Unfiltered HTML