Sophos Firewall

Dear sir,

We request you to need your approval for our firewall firmware upgradtion.

New Version : Version 19.5.3 MR2-Build624

New features

This page describes the new features introduced. For details, see the Sophos Firewall help.
VPN enhancements

• Remote access SSL VPN: Sophos Firewall is now compatible with OpenVPN 3.0 clients. Users can download the compatible configuration file from the user portal.
• IPsec VPN: Phase-1 IKEv2 tunnels for IPsec VPN support GCM and suite-B ciphers. Phase-2 IKEv2 tunnels already offer these ciphers, ensuring full delivery of the stronger encryption.

ZTNA

The ZTNA gateway in the firewall supports scaled deployments with up to 5000 concurrent connections. It now supports 2.5 times more connections than earlier.

Other enhancements

• Web: In the web proxy, we've refined the Pharming protection feature to address a potential vulnerability arising from modifications to the destination IP address during proxy DNS resolution. With the updated behavior, the firewall policy will now undergo re-evaluation using the DNS-resolved IP address from Pharming protection.
• Logging: You can customize the delimiter in syslog event messages, offering flexibility in managing log data.
• New SSD firmware: A firmware upgrade is available for specific SSD drives in some XGS Series appliance models. For more details, see KB-000045830.
• Reporting: Storage threshold for on-box reporting has been lowered from 90 to 80 percent to prevent the /var partition from filling up.