Next EAP release date?

Any news about next release? We will have EAP 3 refresh, EAP 4 or GA version? Any date?

darnoK said:

Any news about next release? We will have EAP 3 refresh, EAP 4 or GA version? Any date?

Hi Michael,
high resource consumption on small devices, specifically the processor, also is very high when using proxy mode, e.g. on the 115 Rev. 2.

A stupid question : Why call that EAP3 Refresh ?  Could not be called EAP4 ?

Paul Jr

V18 EAP3 refresh is needed urgently, currently having issues with more and more sites failing SSL check even when using the web proxy.

I have for the moment disabled https decrypt and scanning to connectivity for some failing sites, eg iinet.net.au an Australian ISP.

Lots of broken sites, but nothing in the logs. This is occurring g on MBP and W10 machine Everytinh works fine when i use the phone as a hotspot, secure connections etc.

ian

v18 is in BETA.  The notion of "urgency" does not apply here.

Paul Jr

see magic happens. LOL

Ian

So ? Installed since few hours ? You found any magic running already ?

As far as I am concerned Microsoft Outlook still refuses to work with DPI activated.

DPI is still no-go.

Paul Jr

IMAPS does not work with 17.5.9 or v18 EAP, the funny part is most sites work and SMTPS  with the XG CA. I am wrong about smtp, it does not work with mac mail.

What magic did I find, the major bug in ATP appears to have been fixed, now just a minor issue. DPI, I haven't seriously tried so far.

Ian

Now waiting until tomorrow's daily reports arrive.

Hi,

I've found some "new magic" on EAP 3 Refresh,

It's finally better to debug SSL/TLS erros on XG. *Overall logs still sucks.

Snort isn't killing my CPU anymore, It's using a reasonable amount of it, also something interesting: On multiple connections, snort is seamlessly sharing the load between the cores perfectly, which is impressive, something changed for good on it.
There's still some quirks and errors with DPI (mostly HTTPS), but It's with Firefox, on chrome it works perfectly now.

They changed how to create NAT rules, for good. (also made a wizard for DNAT)

I believe It has Ilferrara who gave the ideia here. Thank you!

One thing that apparently still hasn't been fixed is the new Flow Monitor, still sucks, and shows values that makes no sense.

*Dumb mistake made by myself.

Thanks!

Hi Prism,

Could you give some more specific detail on what you are seeing with Firefox with DPI enabled?

- Are the problems visible when browsing, or are you just seeing errors being logged?

- If the problems are visible when browsing, do you see errors being logged in the SSL/TLS log in log viewer? If so, could you send (in direct message) example log lines - the detail from the detailed log view would be most helpful.

- Are the problems happening with specific websites or are they happening across a range of sites?

- Are you running on Windows, Mac or Linux?

- In Firefox, enter 'about:config' in the address bar, click through the warning, and then search for security.ssl.enable_false_start. Is this set to 'true'? If you change the setting to 'false' do the quirks and errors go away or reduce?

Many thanks,
Rich

We know of many users (including internal Sophos users) who are running Outlook happily with DPI enabled, and would like to get to the bottom of why you're seeing issues where others are not.

Could you please provide more detail about the issue you're seeing with Outlook.

- What operating system are you running, and which version of Outlook? Are you connecting to a local exchange server or to Office 365?

- At what stage does it fail? Does it not connect at all? Or does it connect, but fail completely or partially to retrieve mail? Or something else?

- Do you see any errors under SSL/TLS or Web Filtering in the log viewer that are related to connections?

- Do you have SSL/TLS decryption enabled for this traffic?

Thanks,
Rich

We know of many users (including internal Sophos users) who are running Outlook happily with DPI enabled, and would like to get to the bottom of why you're seeing issues where others are not.

Could you please provide more detail about the issue you're seeing with Outlook.

- What operating system are you running, and which version of Outlook? Are you connecting to a local exchange server or to Office 365?

- At what stage does it fail? Does it not connect at all? Or does it connect, but fail completely or partially to retrieve mail? Or something else?

- Do you see any errors under SSL/TLS or Web Filtering in the log viewer that are related to connections?

- Do you have SSL/TLS decryption enabled for this traffic?

Thanks,
Rich

Running windows 10, 10.0.18363.592.

Outlook 2010 and Outlook 2013

It takes up to 20 minutes before Outlook connects to Exchange.  After, it works.

In do not see SSL/TLS error.

Paul Jr