Sophos Firewall

After installing 17.5 MR4, you will see that here are issues with Sophos Connect client, this has been fixed in MR4-1, which has just been released, here from comunity: Update: Due to an issue in IPSec in combination with Sophos Connect,…
Read more

Sophos finished SFOS v17.5.4 MR4. It’s a smaller update, and my APX accesspoints, turned RED after reboot. Only thing that fixed that, was to pull the plug on the AP’s and they went all green again 😉 This release is…
Read more

As with the UTM, it’s also possible to reboot specific access points from XG with the AWETOOL command: Log into the command line interface (CLI) as follow: Login with username: admin Enter the admin password Use Option 5 for Device Management Use Option 3 for Advance…
Read more

Hooray, finally, we have support for the new APX-series accesspoints 🙂 Had mine laying around for two months now, so looking forward to get it up and running 🙂 They finished SFOS v17.5.3 MR3. This release is available in stages….
Read more

Hooray, XG 17.5 has been GA released, this is a promising update, with lateral Movement Protection, a REALLY nice feature, that no other provider can do! Also the new Sophos VPN client: Sophos Connect is here with this new version,…
Read more

If you want to try out XG 17.5 in beta(2), head for this: https://community.sophos.com/products/xg-firewall/sophos-xg-beta-programs/sfos-v17-5-early-access/f/sophos-xg-17-5-early-access/108516/welcome-to-xg-firewall-v17-5-early-access Release notes: What’s New in XG Firewall v17.5 Here’s a quick overview of the key new features in v17.5. For a more detailed description please refer…
Read more

Sophos has just released the long awaited MR6, for SFOS v17, I have installed it, and it looks like the VPN dropouts, finally stopped 🙂 Release notes: Note: On v16 to v17 update, SFOS does not set SHA2 truncation on custom…
Read more

Sophos released MR5 today, MR4 was “skipped” due to it’s use was just for the factory to support new hardware: It’s a big maintenance release as you can see. For my use case, I have a lot of IPSEC issues…
Read more

When you use the internal DHCP server of the XG firewall, and you have configured dhcp static entries on ex. the LAN, and you then move the endpoint, ex. a laptop, to a branch office behind a red, where the…
Read more

There are many things, you cannot configure from the XG Firewall GUI, therefore the XG has a CLI (console), where you can do the rest, here is the Command Reference Guide v16, also applicable for SFOS v17: SF-OS-Command-Reference-Guide Source: https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/v16/SF-OS-Command-Reference-Guide.pdf?la=en