{"id":6911,"date":"2023-11-06T15:00:52","date_gmt":"2023-11-06T14:00:52","guid":{"rendered":"https:\/\/partnernews.sophos.com\/en-us\/?p=6911"},"modified":"2023-12-13T16:14:18","modified_gmt":"2023-12-13T15:14:18","slug":"sophos-firewall-v20-is-now-available","status":"publish","type":"post","link":"https:\/\/partnernews.sophos.com\/en-us\/2023\/11\/products\/sophos-firewall-v20-is-now-available\/","title":{"rendered":"Sophos Firewall v20 is Now Available"},"content":{"rendered":"<p>We are extremely pleased to announce that Sophos Firewall v20 is now available with an innovative new active threat response capability, several networking enhancements, added support for securing your remote workforce, and many of your top-requested features.<\/p>\n<p>Sophos Firewall v20 is a free upgrade for all licensed Sophos Firewall customers.<\/p>\n<p>Watch the video below for an overview of what\u2019s new, download the <a href=\"https:\/\/assets.sophos.com\/X24WTUEQ\/at\/w8vnx57qw4vhs997fbknp2j\/sophos-firewall-key-new-features.pdf\" target=\"_blank\" rel=\"noopener\">What\u2019s New PDF<\/a>, or read on for the full details and deep-dive demo videos.<\/p>\n<p><iframe loading=\"lazy\" src=\"https:\/\/player.vimeo.com\/video\/878802542?h=f5d2d623c3&amp;portrait=0\" width=\"640\" height=\"360\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>&nbsp;<\/p>\n<h2><strong>Active Threat Response:<\/strong><\/h2>\n<ul>\n<li><strong>Extending Synchronized Security to MDR and XDR<\/strong> provides a direct feed for security analysts to share active threat information with the firewall to enable it to automatically respond to active threats without creating any firewall rules.<\/li>\n<li><strong>Dynamic Threat Feeds<\/strong> introduces a new threat feed API framework that is easily extensible. It enables threat intelligence to be shared by the Sophos X-Ops team, other Sophos products like MDR and XDR, and ultimately 3<sup>rd<\/sup> party threat feeds in the future.<\/li>\n<li><strong>Synchronized Security <\/strong>now extends the same Red Heartbeat, automated response that Sophos Firewall has always had, to MDR\/XDR identified threats, to ensure compromised hosts are not able to move laterally or communicate out while details including host, user, and process are readily available for follow-up. Synchronized Security has also been enhanced with added scalability and reduced false missing heartbeats for devices that are in a sleep or hibernate state.<img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-6912 size-large\" style=\"font-size: 1em;\" src=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image001.png?w=640\" alt=\"\" width=\"640\" height=\"323\" srcset=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image001.png 1430w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image001.png?resize=300,151 300w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image001.png?resize=768,388 768w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image001.png?resize=1024,517 1024w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/li>\n<\/ul>\n<p>Watch the <a href=\"https:\/\/techvids.sophos.com\/watch\/kysi9dTRDCRHuPFgPi2AEr\" target=\"_blank\" rel=\"noopener\">Active Threat Response demo video<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<h2><strong>Remote Worker Protection and SASE:<\/strong><\/h2>\n<ul>\n<li><strong>ZTNA Gateway Integration<\/strong> makes ZTNA deployments even easier by integrating a ZTNA gateway directly into the firewall. This means any organization that needs to provide remote access to applications hosted behind the firewall, doesn\u2019t need to deploy a separate gateway on a VM \u2013 they can simply take advantage of the gateway integrated into their firewall.\u00a0 When combined with our single-agent deployment on the remote device, ZTNA couldn\u2019t possibly get any easier \u2013 it\u2019s literally zero-touch zero-trust.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-6913 size-medium\" src=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image003.png?w=300\" alt=\"\" width=\"300\" height=\"141\" srcset=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image003.png 827w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image003.png?resize=300,141 300w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image003.png?resize=768,362 768w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/li>\n<li><strong>3<sup>rd<\/sup> Party SD-WAN Integration <\/strong>makes it easy to onramp SD-WAN traffic onto Cloudflare, Akami, or Azure backbone networks to take advantage of their enormous infrastructure, reach, and networking and security services.<\/li>\n<li><strong>Sophos DNS Protection <\/strong>is our new cloud-delivered web security service that will be available separately in early access very soon. It provides a new Sophos hosted domain name resolution service (DNS) with compliance and security features that are fully supported by Sophos Firewall. This service provides an added layer of web protection, preventing access to known compromised or malicious domains across all ports, protocols, or applications \u2013 both unencrypted and encrypted. More news on this new service coming soon.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><strong>Network Scalability and Resiliency Enhancements:<\/strong><\/h2>\n<ul>\n<li><strong>New VPN Portal<\/strong> provides a new containerized, hardened self-service portal for end users to download VPN clients and configuration, auto-provisioning, and clientless VPN bookmarks.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-6914 size-medium\" src=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image005.png?w=300\" alt=\"\" width=\"300\" height=\"191\" srcset=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image005.png 1760w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image005.png?resize=300,191 300w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image005.png?resize=768,489 768w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image005.png?resize=1024,652 1024w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image005.png?resize=1536,977 1536w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/li>\n<li><strong>IPsec Enhancements <\/strong>include seamless HA failover, tunnel status monitoring via SNMP, unique PSK support for the same local and remote gateway connections, and DH Group 27-30 \/ RFC6954 support.<\/li>\n<li><strong>SSL VPN Enhancements <\/strong>include FQDN (fully qualified domain name) host and group support for both remote access and site-to-site SSL VPN.<\/li>\n<li><strong>SD-WAN Scalability <\/strong>increases SD-WAN gateway scalability by 3x to 3072 gateways and the number of SD-WAN profiles to 1024.<\/li>\n<li><strong>IPv6 Enhancements <\/strong>include DHCP Prefix Delegation to seamlessly integrate with your ISP and new enhancements to the dynamic routing engine now support BGPv6 for improved IPv6 interoperability.<\/li>\n<\/ul>\n<p>Watch a video overview of the <a href=\"https:\/\/techvids.sophos.com\/watch\/bgUdBHwMBFLt8KnwgcFr7u\" target=\"_blank\" rel=\"noopener\">VPN Enhancements<\/a> or the IPv6 <a href=\"https:\/\/techvids.sophos.com\/watch\/MoKbV1ZiLPBRFACaaeJSRs\" target=\"_blank\" rel=\"noopener\">BGPv6<\/a> and <a href=\"https:\/\/techvids.sophos.com\/watch\/LvQPWE7moUZJUHrXyF7Nhp\" target=\"_blank\" rel=\"noopener\">DHCPv6<\/a> capabilities.<\/p>\n<p>&nbsp;<\/p>\n<h2><strong>Streamlined Management:<\/strong><\/h2>\n<ul>\n<li><strong>Interface Enable\/Disable<\/strong> delivers a top-requested feature to easily disable or enable network interfaces on the firewall without losing any configuration.<\/li>\n<li><strong>Object Reference Lookup<\/strong> addresses another top-requested feature to find where a given host or service object is used in rules, policies, and routing.<\/li>\n<li><strong>Hi-Res Display Support<\/strong> adds increased horizontal scalability to the management console to take advantage of high-resolution displays to reduce horizontal scrolling.<\/li>\n<li><strong>Auto-rollback on Failed Firmware Updates<\/strong> reduces any disruption, including high-availability deployments.<\/li>\n<li><strong>Backup and Restore<\/strong> now includes the option to restore a backup from a firewall with integrated Wi-Fi to a firewall without Wi-Fi.<\/li>\n<li><strong>Azure AD SSO for Captive Portal<\/strong> adds support for user authentication on the captive portal using their Azure AD credentials.<\/li>\n<li><strong>Azure Group Import and RBAC <\/strong>add support for a new import assistant for Azure AD groups and automatic promotion for role-based admin changes.<\/li>\n<\/ul>\n<p>Watch videos covering the new <a href=\"https:\/\/techvids.sophos.com\/watch\/daqv8rRYvfwJUYvzssjCkJ\" target=\"_blank\" rel=\"noopener\">management features<\/a> and <a href=\"https:\/\/techvids.sophos.com\/watch\/ZRfL8d1UXgJw6idbsSjn1k\" target=\"_blank\" rel=\"noopener\">Azure AD capabilities<\/a><\/p>\n<p>&nbsp;<\/p>\n<h2><strong>Other Enhancements<\/strong><\/h2>\n<ul>\n<li><strong>Web Application Firewall (WAF) Enhancements<\/strong> include geo IP policy enforcement, custom cipher configuration, and TLS version settings, as well as improved security with HSTS enforcement as well as X-Content-Type-Options enforcement.<\/li>\n<li><strong>Azure Single Arm Deployment Support<\/strong> enables the choice of a smaller instance size to save on infrastructure costs and reduce network and operational complexity.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><strong>Get More Details on What\u2019s New<\/strong><\/h2>\n<p>Download the full <a href=\"https:\/\/assets.sophos.com\/X24WTUEQ\/at\/w8vnx57qw4vhs997fbknp2j\/sophos-firewall-key-new-features.pdf\" target=\"_blank\" rel=\"noopener\">What\u2019s New guide<\/a> for a complete overview of all the great new features and enhancements in v20.<\/p>\n<p>Review the <a href=\"https:\/\/docs.sophos.com\/releasenotes\/output\/en-us\/nsg\/sf_200_rn.html\" target=\"_blank\" rel=\"noopener\">release notes<\/a> and <a href=\"https:\/\/doc.sophos.com\/nsg\/sophos-firewall\/20.0\/Help\/en-us\/webhelp\/onlinehelp\/index.html\" target=\"_blank\" rel=\"noopener\">documentation<\/a>.<\/p>\n<p>Watch the Demo Video Series:<\/p>\n<ul>\n<li><a href=\"https:\/\/vimeo.com\/878802542\" target=\"_blank\" rel=\"noopener\">What\u2019s New Overview<\/a><\/li>\n<li><a href=\"https:\/\/techvids.sophos.com\/watch\/kysi9dTRDCRHuPFgPi2AEr\" target=\"_blank\" rel=\"noopener\">Active Threat Response<\/a><\/li>\n<li><a href=\"https:\/\/techvids.sophos.com\/watch\/bgUdBHwMBFLt8KnwgcFr7u\" target=\"_blank\" rel=\"noopener\">VPN Enhancements<\/a><\/li>\n<li><a href=\"https:\/\/techvids.sophos.com\/watch\/MoKbV1ZiLPBRFACaaeJSRs\" target=\"_blank\" rel=\"noopener\">IPv6 BGPv6<\/a><\/li>\n<li><a href=\"https:\/\/techvids.sophos.com\/watch\/LvQPWE7moUZJUHrXyF7Nhp\" target=\"_blank\" rel=\"noopener\">IPv6 DHCPv6<\/a><\/li>\n<li><a href=\"https:\/\/techvids.sophos.com\/watch\/daqv8rRYvfwJUYvzssjCkJ\" target=\"_blank\" rel=\"noopener\">Management and Quality of Life Enhancements<\/a><\/li>\n<li><a href=\"https:\/\/techvids.sophos.com\/watch\/ZRfL8d1UXgJw6idbsSjn1k\" target=\"_blank\" rel=\"noopener\">Azure AD Captive Portal SSO and Group Import<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><strong>Selling v20<\/strong><\/h2>\n<p>Sophos Firewall v20 makes Sophos Firewall easier to use, manage, and sell. Whether you\u2019re managing customer networks, our MDR team is managing it, or they\u2019re managing it themselves, these new features and capabilities add greater value, protection, and improve day-to-day management. Bolster your sales conversations and\u00a0access the product, sales and marketing materials available on the\u00a0<a href=\"https:\/\/partners.sophos.com\/prm\/English\/c\/selling-sophos-firewall\" target=\"_blank\" rel=\"noopener\">Sophos Partner Portal<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<h2><strong>How to Get v20<\/strong><\/h2>\n<p>As with every firewall release, Sophos Firewall v20 is a free upgrade for all licensed Sophos Firewall customers and should be applied to all supported firewall devices as soon as possible. This release not only contains great features and performance enhancements, but also important security fixes.<\/p>\n<p>This firmware release will follow our <a href=\"https:\/\/community.sophos.com\/sophos-xg-firewall\/b\/blog\/posts\/firewall-firmware-release-process-and-timeline\" target=\"_blank\" rel=\"noopener\">standard update process<\/a>.<\/p>\n<p>Please note that Sophos Firewall firmware updates are now downloaded from Sophos Central. Get the <a href=\"https:\/\/community.sophos.com\/sophos-xg-firewall\/b\/blog\/posts\/important-sophos-firewall-licensing-portal-changes\" target=\"_blank\" rel=\"noopener\">full details here<\/a> or follow this quick guide (below) to get the latest v20 firmware for your and your customers&#8217; firewall:<\/p>\n<ol>\n<li>Login to your Sophos Central account and select \u201cLicensing\u201d from the drop-down menu under your account name in the top right of the Sophos Central console:<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6915\" src=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image007.png\" alt=\"\" width=\"640\" height=\"221\" srcset=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image007.png 1429w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image007.png?resize=300,104 300w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image007.png?resize=768,265 768w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image007.png?resize=1024,354 1024w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<ol>\n<li>Select Firewall Licenses on the top left of this screen:<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6916\" src=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image009.png\" alt=\"\" width=\"640\" height=\"228\" srcset=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image009.png 1429w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image009.png?resize=300,107 300w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image009.png?resize=768,274 768w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image009.png?resize=1024,365 1024w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<ol start=\"3\">\n<li>Expand the firewall device you\u2019re interested in updating by clicking the \u201c&gt;\u201d to show the licenses and firmware updates available for that device:<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6927\" src=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image-012.png\" alt=\"\" width=\"640\" height=\"318\" srcset=\"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image-012.png 2846w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image-012.png?resize=300,149 300w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image-012.png?resize=768,381 768w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image-012.png?resize=1024,508 1024w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image-012.png?resize=1536,762 1536w, https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/11\/image-012.png?resize=2048,1016 2048w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/li>\n<li>Click the firmware release you want to download (note there is currently an issue with downloads working in Safari so please use a different browser such as Chrome).<\/li>\n<li>You can also click \u201cOther downloads\u201d in this same box above to access initial installers and software platform firmware updates.<\/li>\n<\/ol>\n<p>The new v20 firmware will be gradually rolled out to all connected devices over the coming weeks. A notification will appear on your local device or Sophos Central management console when the update is available, allowing you to schedule the update at your convenience.<\/p>\n<p>Sophos Firewall v20 is a fully supported upgrade from any supported Sophos Firewall firmware version.<\/p>\n<p>Check out the <a href=\"https:\/\/docs.sophos.com\/releasenotes\/output\/en-us\/nsg\/sf_200_rn.html\" target=\"_blank\" rel=\"noopener\">v20.0 GA release notes<\/a> for more details including the known issues list. Full <a href=\"https:\/\/doc.sophos.com\/nsg\/sophos-firewall\/20.0\/Help\/en-us\/webhelp\/onlinehelp\/index.html\" target=\"_blank\" rel=\"noopener\">product documentation<\/a> is available online and within the product.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>New innovations and top-requested features<\/p>\n","protected":false},"author":19,"featured_media":3000006677,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2],"tags":[272,149],"coauthors":[58],"class_list":["post-6911","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-products","tag-sfos-v20","tag-sophos-firewall"],"jetpack_featured_media_url":"https:\/\/partnernews.sophos.com\/en-us\/wp-content\/uploads\/sites\/3\/2023\/09\/featured-image-sophos-firewall-v20.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/posts\/6911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/comments?post=6911"}],"version-history":[{"count":6,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/posts\/6911\/revisions"}],"predecessor-version":[{"id":6928,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/posts\/6911\/revisions\/6928"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/media?parent=6911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/categories?post=6911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/tags?post=6911"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/partnernews.sophos.com\/en-us\/wp-json\/wp\/v2\/coauthors?post=6911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}