Release Notes & News

https://lovely.com

2023-08-14T13:58:30Z

https://stage-community-sophos-comv11.telligenthosting.net/sophoswireless/b/blog/new (read more)

New Test Post

2023-08-03T20:38:00Z

Test Post(read more)

Wi-Fi 6/6E Release Announcement broken

2023-08-03T20:22:52Z

Test(read more)

Sophos Wireless Update MR v2.3.4-4 release

2023-04-13T16:49:17Z

Overview The following bugs have been resolved in the MR v2.3.4-4 release. Bug fixes: Issue Key Summary CWIFI-13039 The APX Access Point goes offline after a kernel OOPs. CWIFI-13024&nb...(read more)

Release Note for APX update | AP FW 11.0.020

2022-09-06T10:59:00Z

Overview Sophos Wireless APX is getting upgraded for better performance. These changes require firmware updates if used with Sophos UTM or Sophos XG / XGS Firewall. There is no impact on features, capabilities, or other functionality of the acc...(read more)

End-of-Life (EOL) Extension: AP Series Access Points

2022-06-23T15:19:00Z

Due to the ongoing supply chain situation and general Wi-Fi component availability, we have decided to extend the end-of-life (EOL) date for the following AP Series models: AP 15/15C AP 55/55C AP 100/100C/100X The new EOL date is December 31, 2023,...(read more)

AP Series EOL Planning and Wi-Fi 6 / Wi-Fi 6E

2022-04-14T09:19:00Z

JUNE 27, 2022 - PLEASE NOTE: THE EOL DATE FOR THE AP SERIES HAS BEEN EXTENDED TO DEC 31, 2023. Read more. To answer the many questions we've received about our wireless roadmap, we've just published first information on our Partner News Blo...(read more)

Release Notes for APX Series Update | AP FW 11.0.019

2022-04-14T08:01:00Z

Overview Starting in April, all new APX Series access points which are shipped from Sophos warehouses will have an under-the-hood hardware upgrade. For these access points to be registered with either Sophos UTM (SG Series) or Sophos ...(read more)

Release Notes & News: The  AP firmware 11.0.018 for Sophos Firewall OS (SFOS)

2021-12-23T18:09:00Z

Hi Community!  The  AP firmware 11.0.018 has been released for Sophos Firewall OS (SFOS). This pattern update has a fix for APX 120 update issue which was discovered during AP Firmware 11.0.017 release. News: Maintenance ReleaseBugfixe...(read more)

The  AP firmware 11.0.017 for Sophos Firewall OS (SFOS)

2021-12-22T14:27:00Z

Hi Community!  The  AP firmware 11.0.017 has been released for Sophos Firewall OS (SFOS). This pattern update has a fix for the recently discovered Wi-Fi vulnerabilities AKA FragAttacks in legacy Access Points.  In addition to the patch, t...(read more)

Sophos Wireless: Removal of License Requirement in Sophos Central

2021-09-23T11:06:00Z

The global pandemic has forced organizations to rethink their approach to connectivity, access, and IT management. With more solutions moving to the cloud, and workforces becoming more distributed, the need for flexible, remote management and scalabl...(read more)

Sophos Wireless Update 2.3.2 - Firmware (Staged Release)

2021-05-17T18:30:00Z

Overview The Anatel certification for the Sophos APX 320X outdoor model is now complete and Sophos Wireless v2.3.2 brings the support for this model to operate in Brazil. Bug fixes Issue Key Summary CWIFI-12378 ...(read more)

Sophos Wireless Update 2.3.1-7 - Firmware (staged release)

2020-12-07T20:30:00Z

Overview Sophos Wireless v2.3.1-7 is a maintenance release that fixes an internally found issue seen on some APX 320X models only. Bug Fixes Issue Key Summary CWIFI-12434 APX320X: AP fails to boot from backup partition when the prima...(read more)

Sophos Wireless Update 2.3.1 - Firmware (staged release)

2020-09-18T07:30:00Z

Overview Sophos Wireless v2.3.1-5 brings support for the new APX 320X outdoor access point plus a few bug fixes to improve your overall Wi-Fi experience. APX 320X Outdoor Access Point The new APX 320X outdoor access point will start ship...(read more)

Sophos Wireless Update 2.3 - Firmware (staged release)

2020-06-19T07:38:00Z

[Update - 7/08/2020]

All Central regions have been updated with the AP firmware 2.3.0-7 to resolve the issue that caused APX 120 devices to become unresponsive and non-functional. New APX 120s can now be registered. Previously registered APX 120s can now also be upgraded to the latest firmware.

Customers with unresponsive APX 120 access points should contact support for further assistance.

KBA 135669 has been updated.

Overview

Sophos Wireless v2.3.0-6 introduces a number of new features to improve the Synchronized Security functionality. You can now activate synchronized security for Endpoint and Mobile/UEM separately, create a synchronized security SSID for managed devices only, and also create your own custom URL whitelist for the walled garden when a device has a red security heartbeat status. Additionally, there are a few UI enhancements as we have added the user identity to the ‘Devices’ list and to the hotspot feature where there will be seamless device roaming for users connected to a captive portal enabled SSID. This release also contains few bug fixes which will enhance the overall user experience.

Please note: The following new features will not be visible in the user interface until the Sophos Central update has been released. This is currently scheduled for June 29th 2020.

New Feature/Enhancement:

1. Separate Activation of Synchronized Security Sophos Central Endpoint Protection and Sophos Mobile (UEM):

This feature allows an admin who is using synchronized security with their managed endpoints and XG Firewall, to deactivate synchronized security for endpoint in Central Wireless. This option is enabled by default and the security heartbeat will be processed by Central Wireless. Once disabled, a Sophos endpoint will start sending the security heartbeat to XG Firewall instead. From a Central Wireless perspective, these devices become "unmanaged" devices and the security heartbeat status on the ‘Devices’ page will show ‘No Security Heartbeat’. Synchronized security with Sophos Mobile (UEM) is enabled by default and so can now be used even if the feature is deactivated for Sophos Endpoint. For Mobile, this option cannot be disabled as Sophos Mobile is only able to send a synchronized security heartbeat status to Central Wireless, as shown in the image below.

2. Restrict SSID to Sophos Managed Devices:

This option can be used to restrict a particular SSID to Sophos managed devices only. This would typically be used in BYOD and potentially zero-trust environments where an IT administrator would like to enforce compliance amongst the devices that are accessing the network. If an unmanaged device connects to the SSID, it is put in a walled garden state and treated the same as a device with a ‘red’ security heartbeat status. Once the device is put in the walled garden, a warning page is displayed to the user. By default, these devices can access "*.sophos.com" sites. Additionally, the admin can whitelist further URLs for a device to access. More details about this feature are mentioned in the following section.

Additionally, an administrator can customize the page that is displayed on unmanaged devices. To do this, the admin needs to first enable the option and save the SSID. On editing the saved SSID, the admin will see the custom company logo upload option as shown in the image below.

Limitation: This feature can only be enabled when both Sophos Mobile and Endpoint devices are being managed through the same Sophos Central account. If an admin chooses to send the security heartbeat of Endpoints to XG Firewall, this option will be greyed out.

3. Whitelisted Domains for Synchronized Security walled garden:

This feature provides more flexibility to an admin to define the level of network access for devices which have a red security heartbeat status. Previously, these devices could access only "*.sophos.com" sites. Now, an admin can add either a domain name or an IP Address that can be accessed by devices with a red health status, as shown in the image below.

4. User Identity:

The user identity of unmanaged devices based upon the authentication mode is displayed on the ‘Devices’ page. The authentication modes through which the user identity can be retrieved are:

WPA2-Enterprise
Captive Portal:
- Social Login
- Backend Authentication

5. Seamless Device roaming for captive portal enabled SSID

This enhancement will provide uninterrupted device roaming when a device connected to a captive portal enabled SSID roams between access points in a network, meaning the user will not need to re-enter the credentials after roaming.

Bug Fixes

Issue Key	Summary
CWIFI-10519	Captive portal is not working with the combination of Guest network and VLAN
CWIFI-11330	Access point was reporting incorrect security heartbeat status for managed devices
CWIFI-11387	Sites: User can create duplicate Site on Sites page
CWIFI-11438	Sites: Some Access points are not getting the country code based on the geolocation
CWIFI-11412	Synchronized Security AP certificate is being generated on every bootup

Known Issues

Issue Key	Summary
CWIFI-11871	Captive Portal -Social media login issue in some browser versions