In the last few articles on the topic of our latest Sophos Firewall release, we’ve discussed many of the important enhancements to Secure by Design in Sophos Firewall v22. You will be delighted to know that this release also includes many of your top requested features.
Instant Web Notifications for Education
Sophos Firewall is very popular within the education sector due to the fact it offers many features that help schools protect their environment and safeguard students at K-12, primary, and secondary institutions.
One of the top concerns amongst the education sector is monitoring and controlling web content. Sophos Firewall includes rich but easy web filtering policies with the option to block, allow, warn, or provide instructor-controlled access over-rides. With Sophos Firewall v22 web filtering has been enhanced at the request of many of you to now offer instant alerting.
Organizations can now set up instant alerting for restricted web categories which is particularly helpful for education institutions that require this. Emails will be sent as frequently as every 5 minutes with new alerts with a full report showing date, time, user, category, domain, and more. This new feature can be found under Web > Categories.
Enhanced Visibility and Accountability
Many of you have requested enhancements to audit logging to get better visibility into any changes being made to the firewall’s configuration. Sophos Firewall v22 now includes comprehensive audit logs with before and after tracking that meet the latest NIST standards. In this first phase, detailed audit logging is supported for firewall rules, objects, and interfaces and audit logs can be downloaded from Diagnostics > Logs. XML is conveniently used to highlight before and after changes. Future phases will show the delta change within the log viewer.
Many organizations have also asked for hardware monitoring via SNMP and sFlow monitoring for real-time interface data and both of these are now included in Sophos Firewall v22.
Hardware monitoring via SNMP offers a downloadable MIB file from the SFOS UI and supports metrics such as CPU Temp, NPU Temp, Fan speeds, power supply status (on XGS 2100 and above), and PoE measurements for all XGS models with PoE support except XGS 116(w).
sFlow Monitoring provides real-time data based upon your set sampling rate (400 by default with a minimum sample rate of 10) and works on any physical interface, including sub interfaces (alias, VLAN, etc.) with a maximum of 5 collectors. Note that the FastPath will be disabled for the monitoring interface.
Stronger Authentication
Many of you are looking for ways to harden your security infrastructure, and as you know, we fully embrace and support this. As a result, we are happy to address a couple of top requested features for authentication security with this release.
SHA 256 and 512 Support for OTP Tokens has been a very popular request from our SG UTM customers and is now an option on Sophos Firewall for Google and Sophos apps as well as Admin users.
MFA Support for WAF brings multi-factor authentication to the integrated Web Application Firewall (form-based authentication) on Sophos Firewall to provide added security and feature parity in this area as well.
User Experience and Performance
Many of our passionate customers and network administrators are always providing great feedback on the user interface and particularly the performance of the UI when managing complex networks. We are happy to say that this release includes a significant enhancement to the UX with a simple change that makes navigating around the product much faster, particularly for those managing complex networks. Now, instead of having to wait for the given tab to fully populate with data entries, you can now change to a different menu entry or tab without having to wait. This makes the UI much more responsive to your inputs.
In addition, those of you managing a large number of XFRM interfaces will find pagination support as well as new searching and filtering options a nice addition to the product in v22.
Get Started Today
Thanks to all of you participating in the Early Access Program. There’s still plenty of time before the December release to get involved in the program to help make this release the best it can be. Be sure to get involved in the Sophos Firewall v22 Early Access Program today! Also be sure to review the full What’s New Guide for a complete list of all the new capabilities in Sophos Firewall v22.
To learn more about these powerful new offerings and how they can help you deliver unmatched value to your customers, join us for one of our exclusive partner launch webinars on the Sophos Academy.
Launch Webinars:
Announcing Sophos Firewall v22
📅 APJ: Dec 9, 2025 | Register now
📅 EMEA: Dec 10, 2025 | Register now
📅 AMER: Dec 10, 2025 | Register now
