Sophos hat die neue Firmware der XG-Firewall v18 MR1 (Build 396) veröffentlicht. Mit dem Update gibt es einige Verbesserungen und neue Funktionen. Unter anderem werden jetzt die neuen RED 20 und RED 60 unterstützt. Ein Upgrade von SFOS 17.5 MR11 sowie MR 12 auf den neuen Build ist möglich.

Mit der neuen Firmware zeigt die Webkonsole detaillierte Fehlerursachen an, wenn Firmwareuploads fehlschlagen. Außerdem lassen sich nun unter Qurantäne gestellte E-Mails im Userportal freigeben 🙂 . Zuvor veröffentlichte Hotfixes sind übrigens in dieser Version enthalten!

Anbei die Liste der Neuerungen in diesem Build und aus dem Build 367:

NC-60108 [API Framework] Preauth SQLi in apiInterface OPCODE
NC-59156 [CSC] Traffic not passing after upgrade to SF 18.0 MR1
NC-59300 [Email] Blind pre-auth SQLi in spxd on port 8094
NC-23160 [Firewall] LAN test failed in Port3 in SFLoader for 125/135 desktop model
NC-59586 [Network Utils] Remove MD5 remnant
NC-46109 [RED] No proper forwarding if bridging 3 or more RED s2s tunnels on an XG
NC-50796 [RED] All RED site to site tunnel restart when configuring one RED interface
NC-60162 [Reporting] Error 500 displayed for WebAdmin and UserPortal after HF4.1 applied on virtual XG
NC-60171 [Security, UI Framework] Admin to Superadmin privilege escalation
NC-59427 [SFM-SCFM] SQLi in User Portal
NC-59932 [UI Framework] Unable to login to user portal or admin using IE after HF4.1

Aus Build 367
NC-30903 [Authentication] STAS configuration is editable via GUI on AUX machine
NC-50703 [Authentication] Access server restarted with coredump using STAS and Chrome SSO
NC-50716 [Authentication] Cannot import LDAP server via XMLAPI if client cert is "None"
NC-54689 [Authentication] Support download certificate for iOS 13 and above
NC-55277 [Authentication] Service "Chromebook SSO" is missing on Zone page
NC-51660 [Backup-Restore] Restore failed using a backup of XG135 on SG230 appliance
NC-55015 [Bridge] Wifi zone is not displayed while creating bridge
NC-55356 [Bridge] TCP connection fails for VLAN on bridge with HA Active-Active when source_client IP address is odd
NC-52616 [Certificates] Add support for uploading of CRLs in DER format
NC-55739 [Certificates] EC certificate shows up as "RSA" in SSLx CA cert dropdowns
NC-55305 [CM (Zero Touch)] System don't restart on changing time zone while configured through ZeroTouch
NC-55617 [CM (Zero Touch)] Getting wrong error message in log viewer after ZeroTouch process
NC-55909 [Core Utils] Unable to see application object page on SFM
NC-30452 [CSC] Dynamic interface addresses not showing on Aux after failover
NC-55386 [Dynamic Routing (PIM)] PIM-SM import fails with LAG as dependent entity
NC-55625 [Dynamic Routing (PIM)] In HA with multicast interface, routes are not getting updated in the Aux routing table
NC-55461 [Email] After adding/edit FQDN host with smarthost, it is not displayed on the list until refresh the page
NC-58898 [Email] Potential RCE through heap overflow in awarrensmtp (CVE-2020-11503)
NC-55635 [Firewall] Display filter for forwarded is not working properly on packet capture page
NC-55657 [Firewall] HA backup restore fails when port name is different in backup and appliance
NC-55884 [Firewall] IPS policy id and appfilter id not displaying in firewall allow log in logviewer
NC-55943 [Firewall] Failed to resume existing connection after removal of heartbeat from firewall configuration
NC-57084 [Firewall] Custom DMZ not listed in dedicated link HA configuration
NC-44938 [Firmware Management, UX] Web UI does not surface reasons for firmware upload failure
NC-55756 [Gateway Management] Gateway isn't deleted from SFM UI after deleting it from SFM
NC-55552 [HA] WWAN interface showing in HA monitoring ports
NC-55281 [Import-Export Framework] Full configuration import fails when using third party certificate for webadmin setting
NC-55171 [Interface Management] VLAN Interface IP is not assigned via DHCP when gateway name uses some special characters
NC-55442 [Interface Management] DNS name lookup showing incorrect message
NC-55462 [Interface Management] Import fails on configuring Alias over VLAN
NC-55659 [Interface Management] Invalid gateway IP and network IP configured using API for IPv6
NC-56733 [Interface Management] Patch PPPd (CVE-2020-8597)
NC-51776 [IPS Engine] Edit IPS custom rule protocol doesn't work after creation
NC-51558 [IPsec] Add warning message before deleting xfrm ipsec tunnel
NC-55309 [Logging] Local acl rule not created through log viewer for IPv4 and IPv6
NC-50413 [Logging Framework] Gateway up event log for PPPoE interface not always shown in logviewer
NC-55346 [Logging Framework] Clear All for "Content filtering" does not clear SSL/TLS filter option
NC-56831 [Policy Routing] SIP traffic sometimes not working with SDWAN policy route
NC-46009 [SecurityHeartbeat] Spontaneous reconnects of many endpoints
NC-51562 [SecurityHeartbeat] Heartbeat service not started after HA failover
NC-52225 [Synchronized App Control] SAC page loading issues as the list of apps increases
NC-54078 [UI Framework] Internet Explorer UI issue on certain rules and policies pages
NC-56821 [Up2Date Client] SSL VPN downloading with the 0KB
NC-54007 [Web] File type block messages sometimes contain mimetype rather than file type

Weitere Informationen erhaltet Ihr wie immer in der Sophos Community. Solltet Ihr weitere Fragen haben, dann hinterlasst einen Kommentar oder schreibt mir eine E-Mail.