Any comments from Sophos regarding WPA2 may be cracked by KRACK (Key Reinstallation AttaCK)

Patch Release have been announced: https://community.sophos.com/products/sophoswireless/f/questions-issues-bugs/97112/update-on-kracks-patches-for-sophos-products

Cheers,

Karlos

Karlos, can you have whoever put up that article list the actual firmware version that is fixed for Cloud Wireless and XG?  Kind of a guessing game without that info.

Hey BrucekConvergent 

I've updated version numbers for UTM & Central. I will update the information for XG once I receive the information from our Wireless team.

Thanks,
Karlos

I downloaded and installed the new firmware for both RED and AP.

I believe that is not the end of it, I still need to make sure my phone/tables etc etc also get patched, is that correct?

Thanks

Yes your clients should also update -- the AP / RED updates mitigate this attack when attaching to Sophos-managed SSIDs, but when you're in the wild, the client should be patched as well.  Microsoft already released patches in their October update ... I don't have any clients with Macs (at least that I manage) so I'm not sure when or if they have already patched their gear.  Android... who knows... come of the carriers are slow to push updates.

Yes your clients should also update -- the AP / RED updates mitigate this attack when attaching to Sophos-managed SSIDs, but when you're in the wild, the client should be patched as well.  Microsoft already released patches in their October update ... I don't have any clients with Macs (at least that I manage) so I'm not sure when or if they have already patched their gear.  Android... who knows... come of the carriers are slow to push updates.