Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 242 replies
  • Answers 6 answers
  • Subscribers 68 subscribers
  • Views 35327 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Firewall: v19.0 MR1: Feedback and experiences

LuCar Toni

Re-Release: https://community.sophos.com/sophos-xg-firewall/b/blog/posts/sophos-firewall-v19-mr1-re_2d00_release-build-365-is-now-available

https://community.sophos.com/sophos-xg-firewall/b/blog/posts/sophos-firewall-v19-mr1-is-now-available

Release Notes: https://docs.sophos.com/releasenotes/output/en-us/nsg/sf_190_rn.html

"Old" V18.5 MR4 Thread: https://community.sophos.com/sophos-xg-firewall/f/discussions/134965/sophos-firewall-v18-5-mr4-feedback-and-experiences

V19.0 GA Thread: https://community.sophos.com/sophos-xg-firewall/f/discussions/134009/sophos-firewall-v19-0-ga-feedback-and-experiences



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to DejanBukovec

    Hello Dejan!

    As I can see its true that new build is prepared:

    That's correct. We are going to release a new version for MR1, which will include a few additional fixes. We are targeting to release that next week. 

    Issues fixed in the re-release of v19 MR1:

    • NC-100681 [IPS Engine] Increase in snort memory with ATP pattern updates
    • NC-94019/ NC-100737 [Wireless] Inbound traffic for hosts connected on Wi-Fi SSID on Separate zone is dropped by firewall rule ID 0, and outbound traffic may experience slowness
    • NC-100971 [IPsec] Migration fails from v19.0 GA to v19.0 MR1 Build 350
    • NC-81131 [Reporting] Last access time is not generated when there is user present with username that has xss payload
    • NC-100679 [CDB-CFR, Reporting] "INSERT INTO available_login_eventv6%" error in postgres.log causing conf partition to rise

    community.sophos.com/.../sophos-firewall-v19-mr1-re_2d00_release-build-365-is-now-available

  • 0 in reply to DejanBukovec

    If you don't have a support subscription but only other licenses, be aware that this so called "re-release" already count's as one of the three "free firmware updates".

    Introducing that changed firmware update policy along with some major bugs, just to "re-release" the very same firmware again to fix them and to decrease the counter along with it, is an "interesting" business conduct.

  • 0 in reply to Dreamcatcher

    Why do you have a subscription but dont have support? 

  • 0 in reply to LuCar Toni

    Because

    A.) Sophos offers license subscriptions without support
    B.) Sophos support was barely of any help at all in the past

    Doesn't change anything in regards of Sophos' business conduct in this case though.

  • 0 in reply to Dreamcatcher

    You can always reimage the firewall and reset the counter. I am wonder, how many people are affected by this particular use case. I would bet, no even 5 customers are affected by this case. 

  • 0 in reply to LuCar Toni

    Oh really? Ok, let's bet then. :-)

  • 0 in reply to Dreamcatcher

    Lets see, if we can find 5 customers on this thread, affected by this. 

  • 0 in reply to LuCar Toni

    Shouldn't it be pretty easy for a Sophos guy to just check how many customers have license subscriptions without support, instead of waiting for random customer responses on a random thread? I bet that would be a big surprise for you, but obviously you don't have the propper access rights to do something like that. :-)

    Why does Sophos even sell all license subscriptions without a support subscription anyway? You offer something and then you are surprised that someone is making use of it? Really?

    On the other hand you are surprised as well that people use mail protection instead of central mail, because "mail on a firewall is sooooo bad", which brings us to the point where many people already asked you why sophos is selling such a thing if it is that bad, but never ever got an aswer from you. Maybe because the only correct answer coming to your mind would be something like "because getting some money is always better as getting nothing"? ;-)

  • 0 in reply to Dreamcatcher

    Actually that is the reason, i am willing to wait and see. I do not have the exact data but i am quite confident, that Softrelease + non existing license makes a small potion of customers. But we will see. 

    A large potion of customers are not doing the a la card buy, instead the bundle deal. This means, they get Support in there license. There is a marginal part of deals with only network for example. Most opt-in to the bundle. 

    And again: I am here talking about my personal experience and my personal data, i collected in my talks to partners and customers over the last decade. Firewall email is just outdated like firewall and wireless. There is no need to do this on prem anymore. 

  • 0 in reply to LuCar Toni

    We got some customers, which only got bought dedicated A-la-carte subscriptions - but those weren't customers, I install software versions before the firewall actually shows them ^^
    Also - our plan is that all appliances without active support subscriptions will get either an hardware upgrade (then included with support) or support for the existing appliance.

    I agree, that re-releases should not affect the upgrade counter. But imo the number of affected customers should be pretty small - and will fade out, once the the first "run for support contracts" is done^^