A new Up2Date is available for Sophos UTM fixing several issues. Beside the bug fixes, we also introduced changes to the lifetime of our certificates to comply with further browser requirements. Furthermore RED devices will perform a firmware update. A list and details on how to apply this update can be found by reading on.
Sophos UTM 9.108
News
- Maintenance Update
- Reduce lifetime of WebAdmin certificate to 39 months to comply with future browser requirements
- Also reduce lifetime of https-scanning certificate to 39 months
- Support SHA-2 algorithm for SSL VPN authentication
- Remove RC4 from WebAdmin SSL cipher list to comply with current recommendations
- Various WebAdmin fixes in Wireless Status overview
Remarks
- System will be rebooted
- Configuration will be upgraded
- Connected REDs will perform firmware upgrade
Bugfixes
- 23295 Safe search does not work for Yahoo search engine
- 23585 WiFi [ASG]: Wireless Client List misses modified clients that are not shown for a long time
- 24059 Aua fails to handle customized user group attributes
- 24207 [UBB][9.065] Duplicate NAT entries in Service Definition
- 24541 Queries on images.google.com, ca, uk, etc. bypasses SafeSearch
- 26906 Update GPG for security fix [V9]
- 27348 Memory allocation errors in Webfilter for FTP requests
- 27474 Teamviewer via Basic-Auth Webproxy requires creds even if those are stored in the settings
- 27484 turning off RED client connection has no effect, tunnel will still be established
- 27744 Routing issue in RED standard/split mode
- 28013 Its not possible to add more than 20 remote networks into the Sophos IPsec Client
- 28223 The websecurity manager is not able to change or create some proxy settings
- 28226 Httpproxy reaches maximum number of open file descriptors due to header files in tmp (Windowsupdate)
- 28360 Avira Scanner can not scan pop3 mail, Error index out of bound
- 28390 Not possible to activate more than 62 virtual webserver
- 28432 Display errors for hotspot vouchers in japanese language
- 28633 Update kernel and Intel drivers
- 28673 Read-only user can delete quarantine mails in mail manager
- 28846 Slow network throughput on BCM57810 (bnx2x) with kernel warning at net/core/dev.c:2029 skb_warn_bad_offload
- 29175 HTML5 VPN SSL certificate fetch doesn’t work reliably
- 29215 Successful console logins are not logged [V9.1]
- 29283 UTM fails to verify signed emails
- 29483 [CVE-2013-2061] OpenVPN: non-constant time comparsion of HMACs
- 29600 Add host tag to remote syslog messages
- 29663 Httpproxy coredumps every few minutes after update from 9.006 to 9.106
- 29709 NTPd fails to synchronize
- 29792 Bridge: Allow IPv6 pass through has no effect
- 29840 RED doesn’t work in half duplex mode
- 30047 SSL VPN disconnects when transferring large amounts of data [9.1]
- 30059 User Portal webpage doesn’t get fully loaded while using Internet Explorer [9.1]
- 30151 Interface based policy routes don’t work in some setups (9.107 regression)
- 30178 Disable ASPM for 82583V NICs on 120N6 (Bixbox)
Download:
While you do not need to manually download Up2Date packages (they will automatically download and prepare themselves for you to install), for manual application of Up2Dates or for UTM installations without Internet connections, you can retrieve them using the link below.
| Up2date link: | ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.107033-108023.tgz.gpg |
| Up2date MD5sum: | cc0c2e6688e5d5cc9dfe2a74f38a6b56 |
| File size: | ≈93MB |
Up2Date Installation:
Sophos Up2Date technology makes it easy to upgrade your Sophos UTM to the latest version.
There are two ways to apply an already-downloaded Up2Date package to the system:
- Log on to WebAdmin, navigate to Management >> Up2Date >> Overview and use Update to latest version now to install the Firmware Up2Date. Click on the “Watch Up2Date Progress in new window” and an extra browser window will show the progress of the Up2Date installation. (The System administrator will receive a notification email once the Up2Date process has finished.)
- Download the Up2Date package from our HTTP or FTP Server and install it under Management >> Up2Date >> Advanced:
| Sophos UTM Up2Date FTP Mirrors: | ||
 |
 |
|
 |
Feedback
- If you want to provide feedback or want to discuss any of the UTM V9 features you should post it on our User Bulletin Board. Please indicate the version you are using to help us (and everyone helping you).
- If you have any feedback on our help, manual, or any documentation (Online Help) please send it to nsg-documentations@sophos.com.
- You are free to use our new demo server environment without hassle, nags, or registration. Enjoy!
Eric Bégoc
Senior Product Manager