Hi XG Community!

We've finished SFOS v17.5.3 MR3. This release is available in stages. In first stage it will be available at MySophos. We then start with a small amount of slots and will increase those over time. Later it will be available to all other installations as well.

Please see the following link for further information regarding upgrade - KBA 123285 Sophos Firewall: How to upgrade the firmware.

What's New in XG Firewall v17.5 MR3

Airgap Support

Enables updates to XG Firewalls deployed in environments that are physically isolated from the internet. Protection patterns, licenses, and firmware updates can be applied from a USB storage device. Learn more.

Manual Protection Pattern Update Enables security pattern updates, client software updates, and firmware updates for access point and RED devices to be uploaded from a file via the XG Firewall management console. Learn more. APX Series Wireless Access Point Support Support for our new APX 320, 530, and 740 wireless access points with 802.11ac Wave 2 with 2-3x the performance and added device density over our legacy AP Series models. Learn more. APX 740: Flagship 4x4:4 access point with high-density, high-capacity for the mid-market enterprise

APX 530: High performance 3x3:3 access point for typical office environments of all sizes

APX 320: 2x2:2 Dual 5 GHz based access point, perfect for tablets/phones, high-density environment in education, small retail scenarios Broader Backup/Restore Support Support for Migration to XG Series Hardware. Backups from XG Firewall running on SG Series devices can now be restored to XG Series devices. In addition, backups from Cyberoam CROS and SFOS backups can be restored to XG Series devices without any manual conversion. Improved Cyberoam Firewall Rule Migration Compatibility Firewall rules will be automatically grouped based on source and destination zone when migrating to XG Firewall for consistency. DHCP Client on Bridge Interface Support

Bridge interfaces can now receive IP4/IP6 IP address and DNS information via DHCP like standard Ethernet interfaces.