Sophos Firewall: v19.0 EAP2: Feedback and experiences

Update on mail scanning failure.

I installed the CA and restarted the mail client, enabled imap/s scanning, the result was timeout on mail accounts. Removed mail scanning and clients connect.

So, in summary v19 EAP2 has broken IMAP/S scanning.

Ian

The same problem. Mail policy also not tagging spam e-mials as SPAM.
IMAP scanning is very important thing. Will be release any hotfix for that in the near future?

Did this work in MR2? Because MR2 and EAP2 has a bug fix, which should resolve this: NC-54523

Yes, imaps scanning worked in v18.5.2 mr-2. I gave up on smtp/s scanning failed too often on too many devices.

lan

Hi LuCar Toni,

I just installed the update from EAP1 to EAP2 and since EAP2 I cannot block any accesses through the firewall.

I have already deleted all rules except "Drop all" but I can still access any resources, e.g. on the Internet (no proxy is used).
Also Tcpdump shows me that the "Drop all" policy is used.
Even if I disable the default SNAT rule, the ping or tracert still works.

Can anyone here understand this?

Regards,

Markus

Do you have a valid Base License? 

No, thanks for pointing that out, I didn't think of that.

See: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/127946/sophos-firewall-v18-impact-of-expired-license

Anybody with a XGS Appliance can report about the IPsec Site to Site Performance increase? 

Please enable "Add firewall rule" within one click with uncoupling "Add firewall rule" and DNAT assistant. Nobody uses DNAT assistant and if then there is enough space to place it next to the "Add firewall rule" button. Don't force us for all the firewall rules adding click twice instead of a one!