We’re happy to announce that the early entry program (EAP) is now underway for the most recent Sophos Firewall launch. This replace brings a number of Safe by Design enhancements and plenty of of your high requested options.
Safe By Design
Web going through infrastructure has not too long ago come below growing assaults to use vulnerabilities and different weaknesses to achieve a foothold on networks.
As you understand, at Sophos, we take safety very severely and during the last a number of releases we have now invested in implementing many Safe By Design rules to harden the product and make it a way more tough goal. This launch takes Safe by Design to a complete new degree.
Sophos Firewall Well being Test
A powerful safety posture depends upon retaining your firmware updated and making certain your firewall is optimally configured. Sophos Firewall v22 makes it a lot simpler to guage and tackle the configuration of your firewall with the brand new Well being Test characteristic.
This new characteristic evaluates dozens of various configuration settings in your firewall and compares them with CIS benchmarks and different greatest practices, offering quick insights to areas which may be in danger. It’s going to determine all high-risk settings and supply suggestions with fast drill-down to the areas of concern so you’ll be able to simply tackle them.
The well being verify standing is displayed on a brand new Management Middle widget and a full report is accessible below the “Firewall well being verify” essential menu merchandise.
Different Safe By Design enhancements:
- Subsequent-gen Xstream Structure – introduces an all-new management airplane re-architected for max safety and scalability to take us into the long run. The brand new management airplane permits modularization, isolation, and containerization of providers like IPS for instance, to run like “apps” on the firewall platform. It additionally permits full separation of privileges for added safety. As well as, high-availability deployments now profit from a self-healing functionality that’s repeatedly monitoring system state and fixes deviations between units mechanically.
- Hardened kernel – The following-gen Xstream Structure in Sophos Firewall OS is constructed upon a brand new hardened kernel (v6.6+) that gives enhanced safety, efficiency, and scalability to maximise present and future {hardware}. This new kernel gives tighter course of isolation and higher mitigation for side-channel assaults in addition to mitigations for CPU vulnerabilities (Spectre, Meltdown, L1TF, MDS, Retbleed, ZenBleed, Downfall). It additionally gives hardened usercopy, stack canaries, and Kernel Tackle House Structure Randomization (KASLR).
- Distant integrity monitoring – Sophos Firewall OS v22 now integrates our Sophos XDR Linux Sensor that permits real-time monitoring of system integrity, together with unauthorized configuration, rule exports, computer virus execution makes an attempt, file tampering, and extra. This helps our safety groups, who’re proactively monitoring our complete Sophos Firewall set up base to higher determine, examine, and reply extra rapidly to any assault. That is an added safety functionality that no different firewall vendor offers.
- New anti-malware engine – Sophos Firewall OS v22 integrates the most recent Sophos anti-malware engine with enhanced zero-day real-time detection of rising threats utilizing world repute lookups. It takes full benefit of SophosLabs’ huge cloud database of recognized malicious information, up to date each 5 minutes or much less. It additionally introduces AI and ML mannequin detections and delivers enhanced telemetry to SophosLabs for accelerating their rising menace detection evaluation.
Different safety and scalability enhancements:
- Firmware updates through SSL and certificates pinning ensures authenticity
- Energetic Risk Response logging enhancements enhanced visibility
- NDR Necessities menace rating is included in Logs for added insights
- NDR Necessities knowledge middle choice for knowledge residency necessities
- Instantaneous net class alerts for schooling establishments
- XML API entry management enhancements with added granularity
- TLS 1.3 assist for gadget entry for the WebAdmin console and portals
Streamlined administration and high quality of life enhancements:
- Enhanced navigation efficiency
- {Hardware} monitoring for SNMP with a downloadable MIB
- sFlow Monitoring for real-time visibility
- NTP server settings defaults to “Use pre-defined NTP server”
- UI enhancements for XFRM interfaces with pagination and search/filter choices
SG UTM options:
With Sophos UTM heading towards end-of-life quickly (July 30, 2026), some migrating clients will admire these added options:
- SHA 256 and 512 assist for OTP tokens
- MFA assist for WAF form-based authentication
- Audit path logs with earlier than and after monitoring to fulfill the most recent NIST requirements
Get the complete particulars
Obtain the complete What’s New Information for an entire overview of all the good new options and enhancements in v22.
Get began as we speak
You’ll be able to obtain the improve package deal or installer for v22 from the Sophos Firewall v22 EAP Registration Web page. Merely submit your particulars and the obtain hyperlinks shall be emailed to you right away.
All assist through the EAP shall be via our boards on the Sophos Firewall Neighborhood.
Please present suggestions utilizing the choice on the high of each display in your Sophos Firewall as highlighted under in purple or through the Neighborhood Boards.
