SFM for v16 Release Date

Hi Jose,

It is in pipeline but as of now picture is not clear. I will update you in near future.

Ravi

Hi Jose,

Compatibility for SFOS V16 Build 16.01.1.202 in SFMv15 will be release by end of October-2016.

Once the compatibility has been released, User can push SFOS V16 new feature configuration though SFM/CFMv15 from device level only. User is not able to push configuration of new feature of SFOS v16 though SFM/CFMv15 from Group level.

Ravi

Hi Ravi, 

I tried that but still can't access the XG with SFOS 16:

What else should I do?

Thanks for your help.

Regards,

Jose

Hi Jose,

What will happen when you click on your XG v16 device from provided screenshot ?

Ravi

Hi Jose,

I have checked in SFM & found compatibility has not been acquired for SFOS 16.01.1.202 build. I have acquired the same and able to open v16 device level.

Please try to open v16 device level & let me know the status if you are facing any issue.

Ravi

It works but appears a Warning windows that advice that User Interface will be different, The SFM use still the old graphic interface vs the new one of the firmware v16 of the devices managed.

Hi Fabio,

SFM v15, we have provided compatibility support for SFOS v16 firmware only. so GUI is based on SFM v15 GUI.

Once SFM v16 firmware has been release, user will have new GUI based on SFOS v16 GUI.

Ravi

Hi Ravi,

Is it possible with the latest version of SFM that I downloaded today (15.01.0 MR3), to connect a XG210 running V16.01.1?

Thanks,

Richard.

Hi Richard,

Yes it is possible to connect XG210 running v16.01.1 firmware version with latest SFM version 15.01.0.MR3.

Ravi

Hi,

I get the error in system module, system snapshot, "applying the entity has been deferred as device is not compatible with this SFM version"

Is this expected at the moment?

Thanks,

Hi Richard,

Please go to Compatibility page of SFM (System Management > Device Settings > Maintenance > Compatibility Management) & check compatibility for SFOS 16.01.0. build 202 compatibility has been enabled or not? if not enabled then enabled it and check your SF device get sync in SFM or not?

Ravi

Excellent. That's done the trick for the firewall that's remote, but the one local to SFM just times out. If I populate the details of SFM in to the XG, SFM discovers it. I add it in, but then I get the error connection time out. Sorry for all the questions Ravi, but you are being incredibly helpful. :-)

Excellent. That's done the trick for the firewall that's remote, but the one local to SFM just times out. If I populate the details of SFM in to the XG, SFM discovers it. I add it in, but then I get the error connection time out. Sorry for all the questions Ravi, but you are being incredibly helpful. :-)

Sorted I think Ravi. Noticed elsewhere try it in pull rather than push.

Altough I would prefer SFM to push. I am not sure why it works for one firewall and not another. Especially when the local firewall is on the same subnet etc of the SFM.

Hi Richard,

Please provide below detail to analyze issue further.

1. Local SFOS Admin Console HTTPS Port value (System --> Administration --> Setting Page)

2. Local SFOS Central management page screenshot (System > Administration > Central Management)

3. Access port value for SFOS device in SFM (System Management > Device Settings > Managed Devices > Devices)

Ravi Patel

Hi Ravi,

As requested.

1. Local SFOS Admin Console HTTPS Port value (System --> Administration --> Setting Page)

4444

2. Local SFOS Central management page screenshot (System > Administration > Central Management)

3. Access port value for SFOS device in SFM (System Management > Device Settings > Managed Devices > Devices)

4444

Hi Richard,

Change Synchronization mode to Central Management will push config changes to the device & check device get sync in SFM or not.

Ravi

Hi Ravi,

Tried it earlier and it didnt do much apart from site there spinning the synchronising wheel. Now trying again and its been sat there spinning. If I do a test connection, it immediately times out.

Rich.

Hi Richard,

It should work in PUSH mode if SF and SFM devices are in same LAN and directly reachable.

Can you email (ravi.b.patel@sophos.com) me SFM/SF device admin login credential & SSH access to check issue further.

Ravi

Hi Richard,

As per our troubleshooting session, SF connection on port 4444 was getting failed from SFM. We have disable the firewall rule in SF which blocking the port 4444  traffic to resolve the issue.

Ravi

Hi All,

SFM v16 firmware has been release. Please refer below community post for detail about release.

https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sophos-firewall-manager---sfmos-v16-rc1-released

Ravi

Hi Ravi,

I see v16 was just released for SFM, but when will our SCFM instances get updated to v16?

Seems strange to roll out the v16 firmware for SFM without updating the cloud hosted SCFM instances as well?

Kind regards,
Stuart Mitchell