https://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/atomTelligent Community (Build: 12.1.9.35025)2017-07-13T13:08:00Zhttps://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/posts/sophos-puremessage-for-exchange-active-investigation-puremessage-for-exchange-spam-rules-failing-to-update2021-03-26T12:22:00Z2021-03-26T12:22:00ZHi Community,&nbsp; Sophos support have identified an issue in that when PureMessage spam rules are being downloaded by the Endpoint. PureMessage attempts to compile these new rules to the asdb.antispam file and this is causing a failure.&nbsp;Develo...(<a href="https://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/posts/sophos-puremessage-for-exchange-active-investigation-puremessage-for-exchange-spam-rules-failing-to-update">read more</a>)<img src="https://stage-community-sophos-comv11.telligenthosting.net/aggbug?PostID=862&AppID=30&AppType=Weblog&ContentType=0" width="1" height="1">Shwetahttps://stage-community-sophos-comV11.telligenthosting.net/members/shwetahttps://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/posts/ip-change-for-pmx-static2-sophos-com2021-01-08T18:23:00Z2021-01-08T18:23:00Z<p><strong>Note:</strong><span>&nbsp;Initially</span><span>&nbsp;published August 13, 2020. Updated on January 8th, 2021</span></p> <hr /> <p><span>To improve the resiliency of the services that support Sophos appliances, we are making some network infrastructure changes at our data centers. This requires IP address changes for services used by appliances.&nbsp;</span>Sophos will be changing the external IP of the PureMessage Unix Repository on <strong>January 23^rd, 2021 starting at 1100 EST / 1600 UTC</strong></p> <p>For most customers this should not be an issue. But if your appliances are deployed behind firewalls that limit outbound connections based on IP address, you may need to update your firewall rules.</p> <p>Sophos has always recommended that if you do limit outbound connectivity for your appliances, you use DNS-based rules that are capable of adapting to changes in IP address. However, we are aware that some customers are unable to do this and have IP address-based rules in place.</p> <p>Full details of the change are available in this<span>&nbsp;</span><a href="https://support.sophos.com/support/s/article/KB-000039658?language=en_US" rel="noopener noreferrer" target="_blank">Knowledge Base article: IP change for pmx-static2.sophos.com</a></p> <hr /> <p>Similar IP changes are also being made to the following products:</p> <ul> <li><a href="/products/email-appliance/b/blog/posts/changes-to-appliance-service-ip-addresses" rel="noopener noreferrer" target="_blank">Sophos Email Appliance</a></li> <li><a href="/products/web-appliance/b/blog/posts/changes-to-appliance-service-ip-addresses" rel="noopener noreferrer" target="_blank">Sophos Web Appliance</a></li> </ul><div style="clear:both;"></div><img src="https://stage-community-sophos-comv11.telligenthosting.net/aggbug?PostID=700&AppID=30&AppType=Weblog&ContentType=0" width="1" height="1">FloSupporthttps://stage-community-sophos-comV11.telligenthosting.net/members/flosupporthttps://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/posts/pure-message-for-unix-v6-4-9-is-released-17943494112019-11-26T12:48:00Z2019-11-26T12:48:00Z<p>Hi Everyone,</p> <p>Pure Message for Unix v6.4.9 has been released.</p> <p class="p">In this release, there are some major changes.</p> <ul class="ul"> <li class="li">The product&#39;s End User License Agreement is updated and you should read the&nbsp;<a class="xref" href="https://www.sophos.com/en-us/legal/sophos-end-user-license-agreement.aspx" target="_blank">new EULA</a>&nbsp;before upgrading.</li> <li class="li">OpenSSL is upgraded to version 1.1.1c to enable support for TLSv1.3.</li> <li class="li">SSLv2 support has been removed.</li> <li class="li">PureMessage for Unix now supports SUSE Linux Enterprise Server 15.</li> </ul> <p>For more information, please refer to the below release notes:</p><div style="clear:both;"></div><img src="https://stage-community-sophos-comv11.telligenthosting.net/aggbug?PostID=507&AppID=30&AppType=Weblog&ContentType=0" width="1" height="1">Jasminhttps://stage-community-sophos-comV11.telligenthosting.net/members/jasminhttps://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/posts/sophos-puremessage-for-microsoft-exchange-version-4-0-4-released2018-07-03T00:07:00Z2018-07-03T00:07:00Z<p>The latest improvements to Sophos PureMessage for Microsoft Exchange are now available.&nbsp; This latest version focuses on platform support and security enhancements that allow you to keep infrastructure up to date and secure.&nbsp;</p> <p>&nbsp;</p> <p><strong>What&rsquo;s new in PureMessage for Microsoft Exchange 4.0.4</strong></p> <ul> <li>Greater support for Microsoft SQL versions &ndash; now including Microsoft SQL Server 2016/2017</li> <li>Introducing support for TLS 1.2 database connections for secure communication</li> <li>Delivers essential bug fixes (see release notes)</li> </ul> <p>&nbsp;</p> <p><strong>Useful links</strong></p> <p>The following articles have been created or updated for this release:</p> <ul> <li><a href="http://downloads.sophos.com/readmes/pmex_404_rneng.html">Release notes: PureMessage for Microsoft Exchange 4.0.4</a></li> <li><a href="/kb/en-us/132092">Support for TLS 1.2 communications with the SOPHOS SQL instance</a></li> <li><a href="/kb/en-us/132091">Database connection check tool</a></li> <li><a href="/kb/en-us/132093">How to create the required certificate package to allow TLS 1.2 connection to the database</a></li> </ul> <p>&nbsp;</p> <p><strong>Remarks</strong></p> <ul> <li>PureMessage Exchange 4.0.4 software is now available</li> <li>The update will require you to perform a server update and will not be automatically applied by Sophos</li> </ul><div style="clear:both;"></div><img src="https://stage-community-sophos-comv11.telligenthosting.net/aggbug?PostID=335&AppID=30&AppType=Weblog&ContentType=0" width="1" height="1">Rich Becketthttps://stage-community-sophos-comV11.telligenthosting.net/members/rich-becketthttps://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/posts/puremessage-unix-version-6-4-now-available---includes-sophos-delay-queue2017-09-29T05:17:00Z2017-09-29T05:17:00Z<p><strong>News: </strong>New software version available (Server update required)</p> <p><strong>&nbsp;</strong></p> <p><strong>Overview</strong></p> <p>Sophos Delay Queue is now available in the latest version of PureMessage Unix (Version 6.4), helping to stamp out Snowshoe spam &ndash; the attackers preferred method of sending spam.</p> <p>Sophos Delay Queue gives you future proof protection against snowshoe spam - intelligently delaying suspicious mail to run further anti-spam checks. Then automatically rescanning content with updated definitions to increase detection.</p> <p><strong>&nbsp;</strong></p> <p><strong>Guides</strong></p> <ul> <li><a href="/kb/en-us/127127">How to upgrade to version 6.4 with Delay Queue</a></li> <li><a href="/kb/en-us/127126">FAQ for version 6.4 Delay Queue</a></li> </ul> <p>&nbsp;</p> <p><strong>Remarks</strong></p> <ul> <li>PureMessage 6.4 software is now available</li> <li>The update will require you to perform a server update and will not be automatically applied by Sophos</li> <li>Activation of the Delay Queue feature is opt-in. The feature can be activated in your PureMessage Unix admin console once your update to version 6.4 is complete</li> </ul><div style="clear:both;"></div><img src="https://stage-community-sophos-comv11.telligenthosting.net/aggbug?PostID=264&AppID=30&AppType=Weblog&ContentType=0" width="1" height="1">Rich Becketthttps://stage-community-sophos-comV11.telligenthosting.net/members/rich-becketthttps://stage-community-sophos-comv11.telligenthosting.net/puremessage/b/blog/posts/puremessage-unix-version-6-4-coming-soon---includes-delay-queue2017-07-13T07:08:00Z2017-07-13T07:08:00Z<p><strong>News: </strong>New software version</p> <p><strong>&nbsp;</strong></p> <p><strong>Overview</strong></p> <p>The latest version of PureMessage Unix, version 6.4, is coming soon. This update will add Sophos Delay Queue to the range of included email security features, helping to stamp out Snowshoe spam &ndash; the attackers preferred method of sending spam.</p> <p>Sophos Delay Queue gives you future proof protection against snowshoe spam - intelligently delaying suspicious mail to run further anti-spam checks. Then automatically rescanning content with updated definitions to increase detection.</p> <p>&nbsp;</p> <p><strong>Release timelines</strong></p> <p>The initial release of PureMessage Unix 6.4 is now available via the Sophos Support Team. For customers looking to upgrade their servers to this latest version now, please contact support at <a href="mailto:support@sophos.com">support@sophos.com</a>.</p> <p>Access to version 6.4 will be available through the regular update mechanism shortly, with an update sent at the time.</p> <p>&nbsp;</p> <p><strong>How Delay Queue works</strong></p> <ul> <li>When the Delay Queue feature is switched on, your email gateway enters an 11-day learning routine to determine your organization&rsquo;s normal email behavior, recording IP addresses to build a history database and highly-accurate queueing heuristic rules to determine suspicious mail.</li> <li>The gateway then uses these rules to determine how likely a suspicious email is to be spam and&nbsp;moves the email to the Delay Queue. Depending on a how suspicious emails are, they will be held for between 5-60 minutes.</li> <li>As a snowshoe spam campaign is typically over within minutes, during the time the mail spends in Delay Queue SophosLabs will have developed the definitions required to detect any&nbsp;campaign emails. When the mail is released from the Delay Queue, it is&nbsp;rescanned and spam will be blocked.</li> <li>If it still looks suspicious the cycle can be repeated.</li> </ul> <p>&nbsp;</p> <p><strong>Remarks</strong></p> <ul> <li>The update will require you to perform a server update and will not be automatically applied by Sophos</li> <li>Activation of the Delay Queue feature is opt-in. The feature can be activated in your PureMessage Unix admin console once your update to version 6.4 is complete</li> </ul><div style="clear:both;"></div><img src="https://stage-community-sophos-comv11.telligenthosting.net/aggbug?PostID=228&AppID=30&AppType=Weblog&ContentType=0" width="1" height="1">Rich Becketthttps://stage-community-sophos-comV11.telligenthosting.net/members/rich-beckett