Is there an update available, or coming, to update from 17.5.9 / 17.5.10 to v18 without requiring a factory reset?

[Update]

Taken from the Sophos XG Firewall v18.0 GA-Build379 release notes:

• You can upgrade from SFOS 17.5 (MR6 to MR10) to this release 18.0 GA-Build379. We will soon have a re-release of v18 MR1 to support SD-RED devices and upgrade from v17.5 MR11/ MR12. Check out the relevant sections of the XG v18 release notes for details on:
  • Supported hardware appliances
  • Important upgrade information

  Note: Please note that upgrading from SFOS v17.5.x to SFOS v18 GA-Build379 may take longer than normal, due to the file system correction checks. The approximate time is dependent on the hard disk size and state. More info available in this KBA.

We have clietns running 17.5.9 and other running 17.5.12.

I ran through most of community post about v18 here and it seems that 18.0.1.MR1 build 396 will update both versions?

Without factory reset?

Could you please confirm?

Stuart James for me it seems that information above is legit also about 17.5.14.

Upgrades from 17.5 to 18.0 are only allowed to an 18.0 release that were released later in time.

If effect, v18.0 MR2 is saying "I don't know what 17.5 MR14 is, so I don't know how to upgrade from it".

In addition, 17.5 MR14 (being released later) might contain bug fixes or security improvements that are not in 18.0 MR2.

If you are on 17.5 MR14, I advise you to wait until 18.0 MR3 is released.

Upgrades from 17.5 to 18.0 are only allowed to an 18.0 release that were released later in time.

If effect, v18.0 MR2 is saying "I don't know what 17.5 MR14 is, so I don't know how to upgrade from it".

In addition, 17.5 MR14 (being released later) might contain bug fixes or security improvements that are not in 18.0 MR2.

If you are on 17.5 MR14, I advise you to wait until 18.0 MR3 is released.

Thanks for the explanation Michael.

It seems bizarre that they'd release firmware updates for both versions at different times. MR14 was released almost two weeks ago. Sophos are effectively saying don't upgrade to the latest version of 17.5. I guess it is what it is.

Hi Michael, thanks a million for the concise explanation or an otherwise head-scratching behavior! I am running 17.5 MR15 and caught the "factory reset" message when I uploaded 18.0 MR2. Summarizing your explanation--PLEASE correct me if I misunderstood--in order to avoid an ugly factory reset, the 18.0 firmware needs to be NEWER that the running 17.5 firmware.

If my understanding is correct, I should NOT apply further upgrades on the 17.5 tree while I wait for 18.0 MR3.

17.5 MR15 is not released.  I suspect you meant MR14.


For anyone currently on 17.5 who wants to go to 18.0, you can upgrade to 17.5 MR14.

"soon" 18.0 MR3 will be released.  You can upgrade to that.
"later" 17.5 MR15 will be released.  When that happens do not upgrade from MR14->MR15 if you plan to then go to 18.0 MR3.  Once you upgrade to 17.5 MR15 you must wait until 18.0 MR4, which may be awhile.

Or to state another way.  Right now upgrade to 17.5 MR14.
If you want to go to 18.0 then upgrade to 18.0 MR3 (available soon).
If you want to stay on 17.5 for a while then upgrade to 17.5 MR15 (available later).

I cannot give timelines, but the current plan is that next thing being released is 18.0 MR3.  The next thing after that is 17.5 MR15.

My typo, I am on 17.5 MR14 as you surmised. By chance, is there a mechanism to get notified by email when 18.0 MR3 is released?

Thank you again for the super-prompt and clear explanation!