This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 9.004 Up2Date Soft-Released

Greetings!

We have just uploaded the UTM 9.004 Up2Date pacakge to our FTP servers. This release is mostly to add support for a new licensing mechanism for our UTM 100 product, but we'll also take this as an opportunity to increase the stability of UTM 9 by quashing a few bugs, notably a pesky one with IOS6 and the Cisco VPN client that we support. (Cursed Apple always changing things).

A bit about UTM 100 for you:
FAQ:
http://sophserv.sophos.com/repo_kb/118423/file/002%20UTM100_and_BasicGuard_faq_eu_en.pdf
Feature Overview:[/B]
http://www.sophos.com/en-us/support/knowledgebase/118423.aspx
Hardware Overview:[/B]
http://www.sophos.com/en-us/support/knowledgebase/118436.aspx
Note that the UTM 110 has had the 10 user-limit removed entirely, and the UTM 1xx line now has some bandwidth limits on the 100/110 instead which act as separators from the 120 (in addition to the Basic/Full Guard choices).
**To pre-emptively answer the question that is addressed in the FAQ, your existing license and renewals are grandfathered for the future, we won't force you to switch to the new ones. However you cannot buy the old 10-IP limit 110's any longer either. (Keep what you have for the future, but only the new stuff is available to buy as of Nov 1st.) So if you happen to love the 10-IP limit style, I'd suggest you place some (hopefully large) mass-110-license orders today/tomorrow [:)]

Sophos UTM v.9.004(029) Package Information
News
- Support for UTM100 licenses

Remarks
- System will be rebooted
- Configuration will be upgraded

Bugfixes
[22120] Filtering in web security reporting didn't work correctly with IE for the 2nd and more customized filter.
[22375] Problem with double encoding in ssl vpn remote access client part
[22611] Access Points section is completely missing in spanish Webadmin
[22787] Cisco VPN not working with iOS6
[22925] Heap-based buffer overflow in exim4 (CVE-2012-5671)

Download
Link: http://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.004029.tgz.gpg
MD5Sum: 0da131ad727b5ad35bc4b8aa3519794c
Up2Date Size: ~98.5M

As per our soft-release process, we'll monitor this thread for world-ending events as a result of this Up2Date until such time as we release it next Thursday.

This thread was automatically locked due to age.

0 wingman over 13 years ago

Thanks for the update Guys. I will hold my upgrade until the issues have been resolved
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 13 years ago

Now I have an update, and I will keep an eye on this. I did the update to 9004, then applied my license file after the reboot. It showed disabled as I mentioned above. I rebooted the UTM again, and it enabled. Then when the front page refreshed, it showed disabled again.

XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | GB Ethernet x5
Cancel
Vote Up 0 Vote Down

Cancel
0 wingman over 13 years ago

Can you check the logs for the endpoint as well as conf? Maybe there is an issue there. Surely that shouldn't happen
Cancel
Vote Up 0 Vote Down

Cancel

0 Amodin over 13 years ago

The log is showing it is contacting Sophos, at least appears to be. I currently have both computers off that are controlled by the UTM.

2012:10:31-06:35:14 amodin epsecd[4813]: I id="4223" severity="info" sys="System" sub="epsecd" name="Closing socket to Sophos LiveConnect"
2012:10:31-06:35:14 amodin epsecd[4813]: I id="4210" severity="info" sys="System" sub="epsecd" name="Sleeping for 300 seconds"
2012:10:31-06:40:50 amodin epsecd[4813]: I id="4213" severity="info" sys="System" sub="epsecd" name="User triggered changes in webadmin"
2012:10:31-06:41:00 amodin epsecd[4813]: W id="4202" severity="warn" sys="System" sub="epsecd" name="Quit recieved from Sophos LiveConnect"
2012:10:31-06:41:00 amodin epsecd[4813]: I id="4223" severity="info" sys="System" sub="epsecd" name="Closing socket to Sophos LiveConnect"
2012:10:31-06:41:00 amodin epsecd[4813]: I id="4210" severity="info" sys="System" sub="epsecd" name="Sleeping for 300 seconds"
2012:10:31-06:45:09 amodin epsecd[4875]: I id="4201" severity="info" sys="System" sub="epsecd" name="Epsecd starting"
2012:10:31-06:46:22 amodin epsecd[4875]: W id="4202" severity="warn" sys="System" sub="epsecd" name="Quit recieved from Sophos LiveConnect"
2012:10:31-06:46:22 amodin epsecd[4875]: I id="4223" severity="info" sys="System" sub="epsecd" name="Closing socket to Sophos LiveConnect"
2012:10:31-06:46:22 amodin epsecd[4875]: I id="4210" severity="info" sys="System" sub="epsecd" name="Sleeping for 300 seconds"

Not sure why it is saying 'user triggered changes in webadmin' in the log, I haven't done anything.

I am booting up my system now that is controlled, while watching the logs.

XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | GB Ethernet x5

0 Amodin over 13 years ago

Logs show nothing different, UTM is still reporting it off-line, but the client does show that device control is enabled, and I updated it with no errors in the log or program. Same version number - 10.0.

At least the protection is still going for now. [;)]

XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | GB Ethernet x5
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 13 years ago in reply to Amodin

Why should we have to reapply a license after install? That doesn't make sense.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 13 years ago in reply to BrucekConvergent

Why should we have to reapply a license after install? That doesn't make sense.

You don't have to - it didn't do anything when I tried it. [:)] They need to fix the release.

XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | GB Ethernet x5
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 13 years ago in reply to Amodin

For those asking; basic guard is a new type of subscription of the UTM100 and UTM110 license that turns off stuff that a very small office (which is what the 100 and 110 are made for) would not use, and it reduces the cost... BTW, basic guard does include the option to add endpoint security for clients, but the license does not include any "free ones" unlike the 110 / 120 subs do... My guess is someone made a wee error in the licensing daemon and it is actively disabling endpoint security. I happened to have tested this on my home license, and not on a unit using a lab license, so I might check that out. Screenshots for the Sophos Devs are attached to this post.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 AngeloC over 13 years ago

Thanks guys, this is why we have a soft-release [:)] I'm having some checks run on that. We'll be back to you shortly.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 13 years ago in reply to AngeloC

No Worries, Angelo, this is indeed why we have Soft-Releases [[:)]] I only install them on lab systems and non-critical stuff [[:)]]

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel