Hi. This is a release candidate and might be the last update before 9.200. Fixed Issues [28851] Fix uniqueness checks for reverse authentication realms [29168] [BETA] Deleting reverse authentication profile in WebAdmin fails with unexpected error [29200] [BETA] ips: some links in the notification email are not working [29522] [BETA] Cloning a Default Filter action doesn't work [29552] [BETA] atp: threat exceptions for ips events not working [29748] [BETA] changing OTP has no effect on WAF [29750] [BETA] Reporting data is missing for device agent [29894] [BETA] transparent proxy stops responding [29946] [BETA] Up2Date with reserved Nodes -> Sometimes nodes with old versions don't build a new Cluster [30082] [BETA] when disabling ipv6 a reboot is performed [30281] [BETA] packetfilter.log flooded, theory: conntrack entries on CLOSE-WAIT connections expiring too fast [30399] [BETA] IRQd not running - restarted [30427] [BETA] Web Reporting - Domain/URL as IP is not displayed [30446] [BETA] SPX: some characters in mail subject lead to broken subject in pdf [30454] [BETA] SPX portal and user portal get into conflict even if there is none [30484] [BETA] SPX/DLP: turning off SPX while DLP still uses spx encryption blocks further configuration of SMTP proxy [30616] [BETA] Its not possible to use a wireless network (separate zone) in a http proxy profile [30626] [BETA] OTP is not enforced for Backend usergroups [30650] Lost site-to-site VPN configuration after up2date installation [30653] [BETA] database type owner unchanged after fixing database ownership in 9.100 Download Information ASG ISO for Software/Virtual appliance installation: ftp://ftp.astaro.de/pub/UTM/v9/beta/asg-9.195-6.1.iso ISO size................: 609M (638701568 bytes) ISO md5sum..............: 615fbad9cb782d46c7241c3116432ee1 ISO sha1sum.............: 3eab894f7e0e93d9c1fc6f27ceae0462e54c2436 SSI ISO for Hardware appliance installation: ftp://ftp.astaro.de/pub/UTM/v9/beta/ssi-9.195-6.1.iso ISO size................: 612M (641345536 bytes) ISO md5sum..............: 49069e9879e99a4541924aef5925d43a ISO sha1sum.............: 84e6c3c71874851553552e14b346c48d06c5afe8 Up2Date package: ftp://ftp.astaro.de/pub/UTM/v9/beta/u2d-sys-9.194005-195006.tgz.gpg U2D size................: 82M (86256712 bytes) U2D md5sum..............: 3aabe2ae4abcaee0245cfc274ffaa1e6 U2D sha1sum.............: f5ce674b652841a93340e2954a02adb5d90e13dd Please note that the Up2date package will also be distributed over the Up2Date server, so your appliance should usually download the package by itself.

Beta Update 9.195: Release and Download Information

Hi.

This is a release candidate and might be the last update before 9.200.

Fixed Issues

[28851] Fix uniqueness checks for reverse authentication realms
[29168] [BETA] Deleting reverse authentication profile in WebAdmin fails with unexpected error
[29200] [BETA] ips: some links in the notification email are not working
[29522] [BETA] Cloning a Default Filter action doesn't work
[29552] [BETA] atp: threat exceptions for ips events not working
[29748] [BETA] changing OTP has no effect on WAF
[29750] [BETA] Reporting data is missing for device agent
[29894] [BETA] transparent proxy stops responding
[29946] [BETA] Up2Date with reserved Nodes -> Sometimes nodes with old versions don't build a new Cluster
[30082] [BETA] when disabling ipv6 a reboot is performed
[30281] [BETA] packetfilter.log flooded, theory: conntrack entries on CLOSE-WAIT connections expiring too fast
[30399] [BETA] IRQd not running - restarted
[30427] [BETA] Web Reporting - Domain/URL as IP is not displayed
[30446] [BETA] SPX: some characters in mail subject lead to broken subject in pdf
[30454] [BETA] SPX portal and user portal get into conflict even if there is none
[30484] [BETA] SPX/DLP: turning off SPX while DLP still uses spx encryption blocks further configuration of SMTP proxy
[30616] [BETA] Its not possible to use a wireless network (separate zone) in a http proxy profile
[30626] [BETA] OTP is not enforced for Backend usergroups
[30650] Lost site-to-site VPN configuration after up2date installation
[30653] [BETA] database type owner unchanged after fixing database ownership in 9.100

Download Information

ASG ISO for Software/Virtual appliance installation:
ftp://ftp.astaro.de/pub/UTM/v9/beta/asg-9.195-6.1.iso
  ISO size................: 609M (638701568 bytes)
  ISO md5sum..............: 615fbad9cb782d46c7241c3116432ee1
  ISO sha1sum.............: 3eab894f7e0e93d9c1fc6f27ceae0462e54c2436

SSI ISO for Hardware appliance installation:
ftp://ftp.astaro.de/pub/UTM/v9/beta/ssi-9.195-6.1.iso
  ISO size................: 612M (641345536 bytes)
  ISO md5sum..............: 49069e9879e99a4541924aef5925d43a
  ISO sha1sum.............: 84e6c3c71874851553552e14b346c48d06c5afe8

Up2Date package:
ftp://ftp.astaro.de/pub/UTM/v9/beta/u2d-sys-9.194005-195006.tgz.gpg
  U2D size................: 82M (86256712 bytes)
  U2D md5sum..............: 3aabe2ae4abcaee0245cfc274ffaa1e6
  U2D sha1sum.............: f5ce674b652841a93340e2954a02adb5d90e13dd

Please note that the Up2date package will also be distributed over the Up2Date server, so your appliance should usually download the package by itself.

Parents

0 ManuelKarl over 11 years ago

installed, seems stable so far.
A big thanks to the developing team.

But i still have the problem, that if i start browsing with firefox i'm getting a auth-popup window. With IE i can start surfing without.
The fqdn of the utm is resolvable via dns.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 AzRoN over 11 years ago in reply to ManuelKarl

installed, seems stable so far.
A big thanks to the developing team.

But i still have the problem, that if i start browsing with firefox i'm getting a auth-popup window. With IE i can start surfing without.
The fqdn of the utm is resolvable via dns.

In FF, go to the address about:config

In the search field, type ntlm. Find the following line and double click it:

network.automatic-ntlm-auth.trusted-uris

Enter the FQDN of your UTM here. Click OK, close FF, re-open and try surf.

==

When in doubt, Script it out.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 ManuelKarl over 11 years ago in reply to AzRoN

Thx, works perfectly now. :-)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 stealthmatt_01 over 11 years ago in reply to AzRoN

In FF, go to the address about:config

In the search field, type ntlm.  Find the following line and double click it:

network.automatic-ntlm-auth.trusted-uris

Enter the FQDN of your UTM here.  Click OK, close FF, re-open and try surf.

As an organisation we can't be expected to do this for everyone?  Could you explain what is actaully going on here?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 stealthmatt_01 over 11 years ago in reply to AzRoN

In FF, go to the address about:config

In the search field, type ntlm.  Find the following line and double click it:

network.automatic-ntlm-auth.trusted-uris

Enter the FQDN of your UTM here.  Click OK, close FF, re-open and try surf.

As an organisation we can't be expected to do this for everyone?  Could you explain what is actaully going on here?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 apijnappels over 11 years ago in reply to stealthmatt_01

As an organisation we can't be expected to do this for everyone? Could you explain what is actaully going on here?

Yes, firefox is not a Microsoft product and therefore doesn't natively support NTLM authentication. I believe IE is the only browser that supports it out of the box (but not sure about that)

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 samy_01 over 11 years ago in reply to apijnappels

Yes, firefox is not a Microsoft product and therefore doesn't natively support NTLM authentication. I believe IE is the only browser that supports it out of the box (but not sure about that)

Chrome does inherit this settings from IE, so it would work with Chrome too. You can even manage it via GPO for deployment in larger scales.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel