Sophos Firewall OS v18.5 MR1 and Central Orchestration Now Available

Products•Product News•Sophos Firewall

After a successful early access program, Sophos Firewall OS v18.5 MR1 and Sophos Central SD-WAN VPN Orchestration in Sophos Central are now generally available.

12 Ago 2021 Por

SFOS v18.5 MR1

The latest version of SFOS includes many important performance, security and feature enhancements.  It wraps all the great capabilities released over the last year into a major new release that is now available on all SFOS devices: XG Series, XGS Series, virtual, software, AWS, Azure – all our supported platforms.

New software features since v18 – all in v18.5 MR1

SFOS v18.5 MR1 is currently being pushed out to all active Sophos Firewall devices, but you can download the update from the MySophos licensing portal if you wish to get it before it appears in your console.  Get the full details.

Keep your Firewall Firmware up to date!!!

And don’t forget, you can schedule firmware updates via Sophos Central if your firewalls are running v18 MR4 or later.

Sophos Central SD-WAN VPN Orchestration

If you’ve ever setup more than a couple of VPN tunnels between different firewalls, you know how time consuming and tedious this process can be.  Sophos Central Orchestration makes interconnecting VPN tunnels between multiple Sophos Firewalls a quick and easy task.

What you need to take advantage of this:

There are three pre-requisites for Central SD-WAN VPN Orchestration:

  1. Participating firewalls must be running SFOS v18.5 MR1 (see above)
  2. Participating firewalls must be managed from Sophos Central (instructions here)
  3. Participating firewalls must have a trial or license for Central Orchestration (see below)

Central Orchestration is a new license subscription available as a 30-day trial on all Sophos (XG) Firewall devices running SFOS.  Central Orchestration is included at no extra charge as part of the new Xstream Protection bundle for Sophos Firewall and is available as a separate license subscription as well.

While all Sophos (XG) Firewall licenses are currently being migrated to the new licensing scheme over the next few weeks, you can activate a Central Orchestration trial anytime through MySophos to get started with the EAP right away:

  1. Login to the MySophos Portal at sophos.com/mysophos
  2. Navigate to: Network Protection > View Devices and click on the device you wish to activate the trial for to pop-open the license details for that device
  3. Check the box to evaluate Central Orchestration and click Try Now (see screen shot below)
  4. The license update will synchronize with the firewall within 24-hours but you can manually synchronize from the firewall under Administration > Licensing

Central Firewall Reporting Advanced:

The new Central Orchestration subscription license also includes Central Firewall Reporting Advanced with 30-days of data retention in Sophos Central.  This enables you to take advantage of all the great new Sophos Central reports and custom reporting tools to get deep insights across your entire estate of firewalls or any firewall group.

You can easily extend data retention up to a year through additional storage licenses.  Check out the storage estimation tool to get a feel for what’s best for your particular needs.

In addition, Central Firewall Reporting Advanced also includes the Sophos XDR/MTR connector which enables firewall data to be shared for cross-product Extended Detection and Response and our 24/7 Managed Threat Response service.

What Sophos Central Firewall Features Are Coming Next:

The team is continually adding new features to Sophos Central for firewall management and reporting. There are two additional features coming to Central Orchestration within the coming weeks to make this capability even more helpful…

  • Multiple WAN Link Support – enabling redundant tunnels across two WAN links. The current implementation only supports a single WAN link. This enhancement is expected in September.
  • Enhanced NAT’d Firewall Support – supporting firewalls behind NAT devices in more scenarios to improve flexibility. This is expected to roll-out following GA.

In addition, new features are planned later this year for Central Management and Reporting including:

  • Enhanced Partner Dashboard inventory view
  • Streamlined onboarding of new firewalls for partners
  • Firewall rule pinning
  • Enhancements to backups and alerting
  • Management APIs
  • Added AWS region support
  • Numerous usability enhancements

And there’s a lot more exciting Sophos Network Security product news coming over the next few months.

Acerca del autor

Sophos is a global leader and innovator of advanced security solutions that defeat cyberattacks, including Managed Detection and Response (MDR) and incident response services and a broad portfolio of endpoint, network, email, and cloud security technologies. As one of the largest pure-play cybersecurity providers, Sophos defends more than 600,000 organizations and more than 100 million users worldwide from active adversaries, ransomware, phishing, malware, and more. Sophos’ services and products connect through the Sophos Central management console and are powered by Sophos X-Ops, the company’s cross-domain threat intelligence unit. Sophos X-Ops intelligence optimizes the entire Sophos Adaptive Cybersecurity Ecosystem, which includes a centralized data lake that leverages a rich set of open APIs available to customers, partners, developers, and other cybersecurity and information technology vendors. Sophos provides cybersecurity-as-a-service to organizations needing fully managed security solutions. Customers can also manage their cybersecurity directly with Sophos’ security operations platform or use a hybrid approach by supplementing their in-house teams with Sophos’ services, including threat hunting and remediation. Sophos sells through reseller partners and managed service providers (MSPs) worldwide. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com.