Thread Info
  • State Verified Answer
  • +6 person also asked this people also asked this
  • Locked Locked
  • Replies 165 replies
  • Answers 3 answers
  • Subscribers 55 subscribers
  • Views 525479 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Release of v17 MR-2?

Steppenwolf

Hej,

now that MR-1 has appeared, I wanted to ask when MR-2 will appear? The problems and instabilities of IPSec in v17 (especially in connection with V16.5) are very annoying.



This thread was automatically locked due to age.
Parents
  • +1

    Hi everyone,

    MR-2 release is tentatively on December 5th. This can change with unforeseen circumstance, but we'll update this thread if that is the case.

    We'll also post a Discussion post with Release Notes on the Community once its live.

    Cheers,
    Karlos

    Karlos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.
  • 0 in reply to Karlos

    Hi Karlos

     

    Is there a list of for fixes or release notes for what is coming with 17 MR-2?

     

    thanks

  • +2 in reply to Kieron Goucher

    Hi Kiero,

    MR-2 is avaiable:

    A new firmware SFOS 17.0.2 MR-2 is available. We strongly recommend that you upgrade the device.
    Version
    • SF 17.0 MR2 (17.0.2.116)
    News
    • Maintenance Release.
    Bugs
    • NC-22609 [Access] Unable to import groups inside multiple OUs from AD.
    • NC-19427 [API] Wrong date in validationError.log.
    • NC-22394 [Authentication] User Portal login is logged as SSL VPN login.
    • NC-22769 [Authentication] When importing from AD, the name of OUs which are inherited by multiple OUs and groups is not shown correctly.
    • NC-23112 [Authentication] Authentication Agent - getting logged out automatically at random time.
    • NC-19665 [Backup-Restore] Downloading backup creates Java exceptions.
    • NC-21785 [Base System] Wizard UI Improvements.
    • NC-22229 [Base System] SG115: pressing power off button does not shutdown appliance.
    • NC-22574 [Base System] Control center misleadingly shows notification of new firmware availability for few minutes after firmware upgrade.
    • NC-22631 [Base System] Typo in fwinstaller.
    • NC-22688 [Base System, Certificates] Missing QuoVadis Root Certificate.
    • NC-22771 [Base System] Export of 16.5 MR8 and import into v17.0 GA fails for configs without hostname.
    • NC-22780 [Base System] Migration from CR to SF failed on CR500ia-10F appliance.
    • NC-22911 [Base System] Blank screen is displayed when user synchronizes license after successful registration.
    • NC-25573 [Base System] Users cannot activate license keys from SFOS.
    • NC-22354 [Certificates] Passphrase box disappears after trying to upload a CA with private-key after upload fails.
    • NC-22734 [Clientless Access] HTML5 VPN: keyboard input not working on Android devices.
    • NC-22751 [Documentation] Japanese translation for LogViewer missing.
    • NC-17413 [Firewall] Business rules created with device destined IP address can't be blocked with network rules.
    • NC-20602 [Firewall] Incorrect validation for local acl and zone where HTTPS is disabled from current login zone.
    • NC-21180 [Firewall] Add "Action" column to firewall rule grouping.
    • NC-21897 [Firewall] Import/Export of firewall rule with dependent entity fails when a VLAN is configured on WAN.
    • NC-22219 [Firewall] Issue with SNAT policy with multiple gateways.
    • NC-22557 [Firewall] Service edit option not working in specific case.
    • NC-22670 [Firewall] Unable to create RED interface.
    • NC-22923 [Firewall] Hostset ERROR: XG stopped Responding.
    • NC-22932 [Firewall] Export/Import fails for every entity after exporting Security Policy entity.
    • NC-22946 [Firewall] Typo in SF API documentation for IP host object.
    • NC-22958 [Firewall, SFM-SCFM] SFM Compatibility v17: DNAT rule cannot be updated in some combinations of forward type.
    • NC-22982 [Firewall] Incorrect position of firewall rule name in Firefox.
    • NC-22424 [Framework(UI)] Close notification button does not work properly.
    • NC-22917 [Framework(UI)] Infomation icon does not show any info text in authentication page.
    • NC-21856 [IPS] In AppFilter policy smart filter values are still displayed after removal.
    • NC-22448 [IPS] Custom IPS signature not working for all keyword supported by snort.
    • NC-22753 [IPS] Application filter is not updated when there is no application matching smart filter.
    • NC-22834 [IPS] Application Filter Policy: All application is showing while editing through firewall rule with "selected individual application".
    • NC-22382 [IPsec] IPsec UI allow to configure incompatible policy resulting in a silent DPD action change in the backend.
    • NC-22383 [IPsec] Typo in IPsec policy list: 'Action on Active Peer'.
    • NC-22489 [IPsec] Incorrect IP routes added for local VPN traffic in case of NAT over IPsec.
    • NC-22502 [IPsec] IPsec PSK secrets files do not contain local VPN IP.
    • NC-22620 [IPsec] DGD can not be disabled.
    • NC-22622 [IPsec] 'Remote ID' value shows blank on UI for IPSEC connection when external cert is used.
    • NC-22633 [IPsec] Activate on save tries to connect to respond only connections.
    • NC-22793 [IPsec] Cisco VPN connection with cert auth not working on iOS using config from userportal.
    • NC-22888 [IPsec] IPsec S2S tunnel with PSK and local/remote ids not working.
    • NC-22892 [IPsec] Aggressive mode IPsec policys are not filtered correctly in UI.
    • NC-22900 [IPsec] Cannot create 2 IPsec RSA connections with same local id to different remote gateways.
    • NC-22914 [IPsec] Connection status for DGD IPsec connections is not shown correctly.
    • NC-23035 [IPsec] DGD table locked - postgres has returned errcode 25P02.
    • NC-23125 [IPsec] "Randomize Re-Keying Margin by" - When setting the value to 0%, UI displays 100% after saving the policy.
    • NC-23186 [IPsec] IPsec status not displayed when too many SAs are established.
    • NC-22549 [Logging] Sandstorm logo displayed in RED for reason "eligible","pending" & "Cloud Malicious".
    • NC-22745 [Logging] Port and protocol information are missing in LogViewer standard view and filter.
    • NC-15612 [Mail Proxy] Update DLP engine and CCL data.
    • NC-19881 [Mail Proxy] Whitelist and blacklist for e-mail/domains in WebAdmin.
    • NC-21366 [Mail Proxy] Spam e-mails pass due to error " X-CTCH-Error: Unable to connect local ctasd".
    • NC-21437 [Mail Proxy] Mail addresses with "systems" or "solutions" as top level domain cannot be added in address groups.
    • NC-21671 [Mail Proxy] Message is not displayed properly in LogViewer.
    • NC-21891 [Mail Proxy] Spam headers displayed in e-mail when sent through reply portal.
    • NC-22271 [Mail Proxy] Issues with mails in spool marked with a firewall ID.
    • NC-22921 [Mail Proxy] Email flow is affected for recipients using TLS1.0.
    • NC-25332 [Mail Proxy] awarrenmta service segfaults when IP reputation is enabled.
    • NC-22504 [Network Services] Unable to assign two static IP mappings for the same host in different DHCP scopes.
    • NC-22163 [Networking] OSPF Neighbors not updated on changing multicast group limit.
    • NC-22539 [Networking] Fail to add vlan when specific DHCP server confiration migrated.
    • NC-22662 [Networking] Unable to make changes in WAN Link Manager for an interface with /31 subnet .
    • NC-21952 [RED] Site-to-Site RED tunnel between XG and UTM does not pass traffic with hardware acceleration enabled.
    • NC-22433 [RED] Generating certificates fails when long company name is used.
    • NC-22174 [Reporting] Missing size verification on custom logo for on-box reporting.
    • NC-22819 [Reporting] Application reports stop working after enabling Sync App Control.
    • NC-22853 [Reporting] Drill down is not working in mail report when "Mail Count" is selected as sortby.
    • NC-22868 [Reporting] Font style mismatch.
    • NC-22364 [SecurityHeartbeat] EP_Certificates table not available error .
    • NC-22778 [SecurityHeartbeat] Heartbeat registration fails with appliance in HA.
    • NC-22151 [SSLVPN] When using special character in Appliance Certificate, SSL VPN connection fails.
    • NC-22116 [Synchronized App Control] Last occurance time of applications in SAC is not consistent between HA nodes.
    • NC-22384 [Synchronized App Control] After de-registration of Heartbeat enhancedappctrl service is still running.
    • NC-22440 [Synchronized App Control] Sort list of categories in SAC customize menu.
    • NC-22766 [Synchronized App Control] Path of a customized app is shortened in SAC customize popup when app path contains slashes.
    • NC-22768 [Synchronized App Control] Uncategorized category is shown twice in the SAC customize popup.
    • NC-22813 [Synchronized App Control] Fixed height for SAC data table.
    • NC-22824 [Synchronized App Control] EP name with special character is not displayed correctly for macOS in SAC list.
    • NC-22962 [Synchronized App Control] Show category in SAC app list.
    • NC-22544 [UI] Incorrect start time displayed in Live Users list.
    • NC-22576 [UI] Disclaimer message is shown without line breaks.
    • NC-25275 [UI] Internet usage time displayed "NaN:NaN" value in Live Users list.
    • NC-22319 [WAF] "Edit Reverse Authentication" dialog contains untranslatable strings.
    • NC-22521 [WAF] Leftover of shm files cause a WAF restart loop.
    • NC-21534 [Web] Certificate error on accessing sites with https scanning enabled.
    • NC-21930 [Web] Incorrect Error message on Captive Portal when the user exceeds the number of simultaneous logins.
    • NC-22023 [Web] Word list files with non-UTF8 or whitespace-only should not be uploaded successfully.
    • NC-22124 [Web] Web Policy rule is converted to "AllWebTraffic" when adding more than one backslash character in the rule.
    • NC-22125 [Web] When maximum limit is reached, web exceptions cannot be updated anymore.
    • NC-22403 [Web] Certificate Error while accessing Outlook with direct proxy.
    • NC-22653 [Web] Policy Tester does not display backslash in policy name correctly.
    • NC-22721 [Web] AVD dies unpredictably when it runs out of memory.
    • NC-22800 [Web] AVD stability fixes.
    • NC-22930 [Web] Server side rbuf not reset for reused request.
    • NC-22954 [Web] Access to Custom Captive Portal does not work.
    • NC-23156 [Web] Not able to access any websites due to malformed ATP data update.
    • NC-23163 [Web] Font color for Initial Setup Wizard changes.
    • NC-12089 [Wireless] Unable to edit alias of "GuestAP" interface.
    • NC-19166 [Wireless] SSID disappears randomly with Dynamic Channel Selection.
    • NC-20761 [Wireless] Wireless Client List shows wrong IP address after network change.
    • NC-21369 [Wireless] VLAN and non VLAN SSIDs can't be selected at the same time for RED15w.
    • NC-22358 [Wireless] SSID is not broadcasted from time to time.
    • NC-22852 [Wireless] Wireless network interface status states being unplugged.
  • 0 in reply to Rodrigo Pereira

    Hi all

    IPSec failover group working as expected!  :)

    Regards

  • 0 in reply to Rodrigo Pereira

    Thanks for the Changelog/Update!

    Regards Simon

    Sophos XG 17.5.1 MR-1 | Dell 7010 | Intel(R) Core(TM) i5-3550 CPU @ 3.70GHz | 8GB Memory
    Samsung EVO 850 120GB SDD | 1x Intel 82574L / 2x 82571EB Gigabit Ethernet Controller (rev 06)

  • 0 in reply to Rodrigo Pereira

    Do you know when the files will be updated so can be manually updated?

    My 105 has picked up the update, but the two VMs I have for testing are not yet. The ISO's that are available are only MR1 spec.

    Thanks.

    Sophos XG Certified Administrator

  • 0 in reply to Rodrigo Pereira

    Hmm....It seems as though user configured IPSEC Profiles are not able to be selected ?  We had a tunnel that is not coming up with a user created profile and you cant select it in the Profile drop downlist.

Reply Children
  • 0 in reply to Scott_D_L

    Interestingly...I'm only seeing this problem(problem using manually created encryption policy) on one XG135.  I have another one that does not have this issue, but it doesnt have an active VPN going  like I did on the first one.  Going through the creation process on the second unit I can choose a manually created ipsec/encryption policy.    I've opened up a support ticket, hopefully they can give me an answer.

     

Cookie Information Banner