SF 18.0 GA-SR2 (18.0.0.339)

I installed it few hours ago and some of these features are of interest to me except I don't see where they are ...

It's nice to list them, but some screen shot would have been more explaining.

For example, where's the option to disable TLS per rule ?  I do not see what's the difference in the "Web Filtering" menu ...

Paul Jr

Seems to me this disable TLS inspection entirely.  Not just per rule. 

Paul Jr

Nice improvement. Now it is more clear when the traffic is processed by proxy or dpi engine.

Regards

Big_Buck said:

Seems to me this disable TLS inspection entirely.  Not just per rule. 

 

Each rule can already be turned on an off, just like a a firewall rule.

Please review this post on how the new toggle works.

https://community.sophos.com/products/xg-firewall/b/blog/posts/xg-firewall-v18-ga_2d00_build339-is-now-available

What is this exactly?

 docs.sophos.com/.../IPSEnhancements.html

• Intelligent IPS Signature Selection

It only affects to the rules downloaded. This can't be seen in the interface in any way, right?

Hi Michael,

big_buck is correct reading the release notes, the feature applies to all SSL/TLS rules and the button does not appear against each rule as implied. There is no option in the SSL/TLS rule to disable scanning.

Ian

I know this. 

It's just that the list of New Features's descriptions is incorrect.

Thanks for the link, which describes it properly.

Paul Jr

The change only applies to all ssl/tls rules not individual rules as a implied.

There is only one switch with three rules so it is an all or nothing setting.

Ian

alda said:

A new firmware 18.0.0 GA-Build339 is available. We strongly recommend that you upgrade the device.

Version

• SF 18.0 GA-SR2 (18.0.0.339)

News

• Feature Release
• Option to disable SSL/TLS inspection per rule

"SF 18.0 GA-SR2" is GA Soft Release 2.  The list of features above is a list for GA, not the changes between GA and GA-SR2.

To interpret that line:

If you think that line is about an option to disable SSL/TLS inspection using a rule, it is.  You can turn off SSL/TLS inspection using a rule that is "Don't Decrypt".

If you think that line is about an option to disable SSL/TLS inspection rules, it is.  You can click (...) and move the slider to Off to disable the rule.

That line is not referring to the new option in SR2 about globally disabling TLS rules.