Sophos Firewall OS (SFOS) v19 MR1

---

请访问原文链接：Sophos Firewall OS (SFOS) 19.0 GA，查看最新版。原创作品，转载请保留出处。

作者主页：www.sysin.org

抄袭者 macz、qq_23930765、hanzheng260561728 请远离本站！！！

---

强大的防护和性能

设备 • 云 • 虚拟

Xstream 防护

Sophos Firewall 的 Xstream 架构保护您的网络免受最新威胁，同时加快重要的 SaaS、SD-WAN 和云应用程序传输的速度。

• TLS 1.3 解密

  通过快速有效的智能 TLS 检查消除一个巨大盲点，支持最新标准提供丰富的例外和指向单击政策工具，方便您工作。

• 深度数据包检查

  通过高性能流深度数据包检查阻止最新勒索软件和外泄，包括下一代 IPS、Web 防护和应用程序控制 (sysin)，以及 SophosLabs Intelix 支持的深度学习和沙箱。

• 应用程序加速

  自动或通过您自己的政策加速您的 SaaS、SD-WAN 和云流量，如 VoIP、视频和其他受信任应用程序，放在 Xstream FastPath 上优化性能。

查看所有功能

Xstream SD-WAN

Sophos Firewall 的最新 SD-WAN 功能实现极佳网络性能、灵活性和弹性。

• Xstream FastPath 加速

  加速 SD-WAN IPsec VPN 隧道流量，充分发挥 XGS Series 设备的硬件加密功能。

• 基于性能的路由

  根据 WAN 链路性能（延迟、抖动、损失）实时优化流量的路由和重新路由，不造成任何影响。

• 指向单击协作

  只需单击几次，轻松设置最复杂的辐射或全网格 SD-WAN 重叠网络，具有完整隧道冗余。

了解更多

强大性能

XGS 系列在所有价位提供 Xstream 性能，实现现代多样性、分布式和加密网络需要的防护 (sysin)。

• Xstream 支持

  在硬件层面加速和卸荷重要 SaaS、SD-WAN 和云流量，通过集成的 Xstream Flow 处理器增加 TLS 和深度数据包检查的性能空间。

• 高速连接性

  通过用于高速铜线、光纤、Power over Ethernet (PoE) 和 Wi-Fi 的丰富附加模块，定制防火墙已有的各种连接选项。

• 专门打造的性能

  请放心，您的防火墙专门打造，包括核心的双处理器架构以处理要求最高工作，丰富内存配置，高性能固态存储。

型号对比

了解工作方式

Sophos Firewall - How it Works=

集中式云管理

Sophos Central - 终极网络安全云管理平台。免费简单。

• 一个控制台管理全部内容

  Sophos Central 为所有 Sophos 产品提供一个云管理控制台，免费提供组防火墙管理 (sysin)。

• 云报告

  Sophos Central 在云端维护防火墙日志数据，提供灵活报告工具，支持您分析并显示一段时间的网络情况。

• 零接触部署

  Sophos Central 支持您从 Sophos Central 轻松部署新的 Sophos Firewall 设备，无需接触。

更多了解 Sophos Central

观看影片

免费试用

资源

Sophos Firewall 及 XGS 系列产品手册

Sophos Firewall 新增内容

Sophos XG 系列硬件產品小冊子

Sophos Firewall 解决方案概要

Sophos 防火墙功能列表

防火墙购买指南

Sophos Firewall 和 SD-WAN

向 SD-WAN 过渡

面向教育行业的防火墙产品手册

防火墙最佳做法白皮书

您需要的五个 TLS 检查功能

Sophos Central Firewall 手册

SFOS v19 MR1 更新说明

July 25, 2022

Sophos Firewall OS v19 was released just a few months ago, and has already been adopted by a huge number of partners and customers.

They’ve upgraded to take advantage of the many Xstream SD-WAN and VPN enhancements. This latest update, v19 MR1, brings a number of additional enhancements and fixes to what is already one of our best firewall updates ever.

VPN and SD-WAN enhancements

• SSLVPN remote access – static IP lease support to enable mapping of remote users with static IP addresses to improve user traceability, monitoring and visibility. This also includes static IP leases with an external Radius server.
• IPsec VPN enhancements – includes adding default IPsec site-to-site IKEv2 policies for improved head office to branch office tunnels, eliminating manual fine tuning for re-key interval, dead peer detection (DPD) action, and key negotiation. Defaults were also updated to prevent flapping of UDP connections (VoIP, Skype, RDP, Zoom, etc.). Also disabled “vpn conn-remove-tunnel-up” and enabled “vpn conn-remove-on-failover” for new configuration (but does not impact existing deployments).
• SD-RED – now supports multiple DHCP servers for RED interfaces
• SD-WAN Profiles – The Rule-ID and index column are added on the SD-WAN profile management page for easier troubleshooting

Other enhancements

• Anti-malware engine – anti-malware engines and associated components were upgraded to full 64-bit operation to provide optimal performance and future support. Note that the secondary malware scan engine, Avira, will no longer provide detection updates for the 32-bit version after December 31, 2022. Anyone using Avira will need to upgrade to v19 MR1 or v18.5 MR5 (to be released soon) before the end of the year or switch to just using the Sophos engine.
• Synchronized Security – improved Sophos Central Firewall Management resilience in environments with thousands of endpoint certificates being used for Synchronized Security Heartbeat.
• Email – added an option to report a spam email as a false positive from the quarantine release screen
• Sophos Assistant – added an option to opt-out of the Sophos Assistant
• Additional fixes – over 50+ additional performance, stability, and security fixes and enhancements are also included

See the release notes for full details.

Important licensing change for future firmware updates

As covered in this recent community blog post, SFOS v19 MR1 introduces a support requirement for firmware upgrades which will come into effect for customers without a valid support subscription after they’ve used an initial free upgrade allocation.

To summarize:

• No change for customers with a valid support subscription (about 80% of customers)
• Future action will be required by the remaining 20% who do not have a support subscription, but also no immediate change

Full details and FAQs

下载地址

Sophos Firewall OS (SFOS) v19 MR1

百度网盘链接：https://pan.baidu.com/s/1yrYnlUHEdhiNwkrXtWtrmQ 提取码：q2el

---

---

• ← Previous Post
• Next Post →

---

---