XG V18 MR3

Hi All,

To confirm, yes - the release for v18 MR3 has been unfortunately delayed and will not be released this week. Please stay tuned next week, as we'll continue to follow up with the development teams to share updates for the Community.

Hi Flo,

have the development team provided any update guidance on the release date?

Ian

Any news on MR3? Can we expect a release for this week?

XG18 MR1 is so unstable on certain network connections (SIP, Remote Tools, etc....)

Thinking about switching back to our UTM. 

Why does it seem that the UTM is more stable and more feature rich even though its older?

it does seem like it but it's not, I use both (UTM & XG) and until the stability issues are ironed out (on both sides), these are not what I would class as an Enterprise grade products, and the support is just shocking most of the time. please note that when you get through to someone who knows then your issue

I have a ticket with them right now which is the same fault as 4 months ago, and it took Sophos 4 months to fix it before ... irony, and this fault first became visible to me 3 years ago.

Are we still thinking weeks or months at this point?

I get you guys are doing your best, but my customers are really wanting to upgrade from 17 to 18 mr3. Just throw me another estimated date at least so I can make sure they stay happy. :)

Think we have to wait one more week...

I can only recommend you one thing ... Don't.  v18 is mostly about two things.  Decoupled NAT, and TLS/SSL Inspection rules.  The later does not work.  Source of continous problems and slowing down everything to a crawl.  You can live with coupled NAT. So. Wait at least another year.  Seriously.  Other wise you'll be part of Sophos Q&A team liking it or not.  And your customers will want to hang you.

Paul Jr

Or maybe It will be out this week, there will be a webinar talking about v18 MR3 next Monday.

Technical Update Session

The next Technical Update session will occur on Monday, October 12, 2020 at 3:30pm (CET).

Agenda:

• Introduction
• Most recent product updates:
  • Sophos Connect 2.0
  • XG Firewall v18 MR3
  • New APX Access Point
• You asked – we deliver: Live demo of Synchronized Security
• Q & A

More info at Sophos Partner News.

Big_Buckis right about the TLS/SSL Inspection Rules; it just doesn't work.  You will pull your hair out trying to troubleshoot why sites randomly either fail to load or load extremely slowly.  Loved getting the panic call from our HR people who couldn't process payroll because the site wouldn't load halfway through.  The answer you'll get from Sophos is "Make an exception" but when you observe that somewhere around 30% of sites have problems, that's not a practical or realistic or serious answer.  

Part of the reason I've been so interested in MR3 is the hope that there are major improvements to the TLS/SSL engine, but I'm not holding my breath anymore.  

Make exception rules was what I was told too.  If you look at Sophos own built-in exception rules (for Microsoft updates for example), you'll notice that many of them disable ssl inspection very widely to a point it is not usefull anymore.

Paul Jr

I got a Webinar today with the following topic: "What was in MR3 and is coming in MR4"

Maybe I can provide some more here after it.

I got a Webinar today with the following topic: "What was in MR3 and is coming in MR4"

Maybe I can provide some more here after it.

I hope they have some good stuff planned. 

It took them forever to get it done. 

most probably fixing the typos that were made by a previous dev that is no longer working for Sophos.

Hello Argo,

I'm afraid they would have to fire everyone who had anything to do with a firewall rules, NAT rules and TLS / SSL rules too.
So is it about half of all developers?
I think they would definitely deserve it, but I'm afraid it didn't happen ....

Regards

alda

Sophos retrenched about 150 staff earlier this year.

ian

Hello rfcat_vk,

That is true, but it has been cut across all departments. It was not aimed at incompetent developers.
Unfortunately, it also affected workers who were very capable and were definitely a benefit to Sophos.
When the forest is felled, splinters fly - we say here.

Regards

alda

Any updates from the Webinar?

They said it will be released this week. They had to do some further QA testing. Thats why it was delayed.

Ok, i wanted to know what new and improved features will be in the MR3 release.

Better SSL VPN Performance
Better HA Support for Sophos Central

giannki that's all?  Any Updates for Sophos Connect 2.0 MacOS? Or that they finally fixed that mess of AD Sync?