We\u2019re happy to announce that the early entry program (EAP) is now underway for the newest Sophos Firewall launch. This replace brings thrilling industry-first enhancements and top-requested options, together with\u2026<\/p>\n
Sophos NDR Necessities integration<\/strong><\/h2>\n![\"\"](\"https:\/\/news.sophos.com\/wp-content\/uploads\/2025\/04\/NDR-E.png?w=300\")
<\/a>Arrange and monitor NDR Necessities menace feeds underneath the Energetic Menace Response menu.<\/figcaption><\/figure>\nSophos Firewall prospects with Xstream Safety now get Sophos NDR Necessities within the cloud, for no further cost, considerably bolstering community safety:<\/p>\n
Sophos NDR Necessities can detect energetic adversaries utilizing encryption with out utilizing TLS decryption due to AI Convolutional Neural Community (CNN) evaluation. Sophos NDR Necessities may detect superior area technology algorithms that attempt to evade regular DNS and net filtering.<\/p>\n
Sophos NDR Necessities delivers a brand new layer of safety, and because it\u2019s cloud-hosted by Sophos, it doesn\u2019t influence your firewall efficiency in any respect \u2013 additional strengthening our {industry} main efficiency and safety. Overview the What\u2019s New Information<\/a> for full particulars.<\/p>\nEntra ID (Azure AD) single sign-on for distant entry VPN<\/strong><\/h2>\nCertainly one of your high requested options makes distant entry VPN simpler for finish customers, enabling them to make use of their company community credentials with the Sophos Join consumer and the firewall VPN portal:<\/p>\n
\n- Entra ID (Azure AD) single-sign on integration with Sophos Join and the VPN portal is now included in SFOS v21.5<\/li>\n
- It supplies cloud-native integration over the {industry} customary OAuth 2.0 and OpenID Join protocols for a seamless expertise<\/li>\n
- Supported with Sophos Join consumer 2.4 (and later) on Microsoft Home windows<\/li>\n<\/ul>\n
Different VPN and scalability enhancements<\/strong><\/h2>\n\n- Person interface and usefulness enhancements: Connection sorts have been renamed from \u201csite-to-site\u201d to \u201cpolicy-based,\u201d and tunnel interfaces have been renamed to \u201croute-based\u201d to make these extra intuitive<\/li>\n
- Improved IP lease pool validation: Throughout SSLVPN, IPsec, L2TP, and PPTP distant entry VPN to eradicate potential IP conflicts<\/li>\n
- Strict profile enforcement: On IPsec profiles that exclude default values to make sure a profitable handshake, eliminating potential packet fragmentation and tunnels failing to determine correctly<\/li>\n
- Route-based VPN scalability: Route-based VPN capability is doubled with assist for as much as 3,000 tunnels<\/li>\n
- SD-RED scalability: Sophos Firewalls now assist as much as 1,000 site-to-site RED tunnels and as much as 650 SD-RED units.<\/li>\n<\/ul>\n
Sophos DNS Safety<\/strong><\/h2>\nFinal yr, we launched our DNS Safety service and made it free for all Xstream Safety-licensed firewall prospects. With this launch, Sophos DNS Safety will get additional integration with Sophos Firewall:<\/p>\n
\n- New management middle widget to point service standing<\/li>\n
- New troubleshooting insights through logging and notifications<\/li>\n
- New guided tutorial on tips on how to arrange Sophos DNS Safety simply<\/li>\n<\/ul>\n
Streamlined administration and quality-of-life enhancements<\/strong><\/h2>\nAs with each Sophos Firewall launch, this model consists of a number of quality-of-life enhancements that make day-to-day administration simpler:<\/p>\n
\n- Resizable desk columns: A protracted-requested function, many firewall standing and configuration screens now assist resizable column widths which can be retained in browser reminiscence for subsequent visits. Many screens equivalent to SD-WAN, NAT, SSL, Hosts and companies, and site-to-site VPN, all profit from this new function.<\/li>\n
- Prolonged free textual content search: SD-WAN routes now allow looking out by route identify, ID, objects, and object values like IP addresses, domains, or different standards. Native ACL guidelines additionally now assist looking out by object identify and worth, together with content-based search.<\/li>\n
- Default configuration: By standard demand, the default firewall guidelines and rule group beforehand created when establishing a brand new firewall have been eliminated with solely the default community rule and MTA guidelines supplied throughout preliminary setup. The default firewall rule group and the default gateway probing for customized gateways are each set to \u201cNone\u201d by default.<\/li>\n
- New font: The Sophos Firewall person interface now sports activities a brand new lighter, cleaner, sharper font for added readability and improved efficiency<\/li>\n<\/ul>\n
Different enhancements<\/strong><\/h2>\n\n- Digital, software program, cloud licensing: In case you missed it<\/a>, all Sophos Firewall digital, software program, and cloud licenses (BYOL) now not have RAM limits. Licenses are actually strictly restricted by core rely and haven’t any RAM restrictions.<\/li>\n
- Bigger file dimension restrict in WAF: Helps a configurable request (add) file dimension restrict for Internet Software Firewall (WAF), which may now scan information as much as 1 GB<\/li>\n
- Safe by design: We’re frequently enhancing the safety of Sophos Firewall, and on this launch are including real-time telemetry gathering to flag any surprising modifications to core OS information utilizing safe hash validation. This may allow our monitoring groups to proactively establish potential safety incidents early earlier than they’ll turn out to be an actual downside.<\/li>\n
- DHCP prefix delegation leisure: Now helps \/48 to \/64 prefixes, enhancing interoperability with ISPs. Router ads (RA) and the DHCPv6 server are additionally now enabled by default.<\/li>\n
- Path MTU discovery: This may resolve TLS decryption errors as a result of newest ML-KEM (Kyber) key trade assist in browsers. The Sophos Firewall deep packet inspection engine will now robotically detect and alter the MTU for every circulate, guaranteeing optimum efficiency primarily based on particular community circumstances.<\/li>\n
- NAT64 (IPv6 to IPv4 visitors): NAT64 is supported for IPv6 to IPv4 visitors in express proxy mode. On this mode, IPv6-only purchasers can entry IPv4 web sites. The firewall additionally helps IPv4 upstream proxy for IPv6-only purchasers.<\/li>\n<\/ul>\n
Get the total particulars<\/strong><\/h2>\nObtain the total What\u2019s New Information<\/a> for a whole overview of all the good new options and enhancements in v21.5.<\/p>\nGet began right now<\/strong><\/h2>\nYou possibly can obtain the improve bundle or installer for v21.5 from the Sophos Firewall v21.5 EAP Registration Web page<\/a>. Merely submit your particulars and the obtain hyperlinks might be emailed to you immediately.<\/p>\n
![\"\"](\"https:\/\/news.sophos.com\/wp-content\/uploads\/2025\/04\/NDR-E.png\")
<\/a>Sophos Firewall prospects with Xstream Safety now get Sophos NDR Necessities within the cloud, for no further cost, considerably bolstering community safety:<\/p>\n
Sophos NDR Necessities can detect energetic adversaries utilizing encryption with out utilizing TLS decryption due to AI Convolutional Neural Community (CNN) evaluation. Sophos NDR Necessities may detect superior area technology algorithms that attempt to evade regular DNS and net filtering.<\/p>\n
Sophos NDR Necessities delivers a brand new layer of safety, and because it\u2019s cloud-hosted by Sophos, it doesn\u2019t influence your firewall efficiency in any respect \u2013 additional strengthening our {industry} main efficiency and safety. Overview the What\u2019s New Information<\/a> for full particulars.<\/p>\n Certainly one of your high requested options makes distant entry VPN simpler for finish customers, enabling them to make use of their company community credentials with the Sophos Join consumer and the firewall VPN portal:<\/p>\n Final yr, we launched our DNS Safety service and made it free for all Xstream Safety-licensed firewall prospects. With this launch, Sophos DNS Safety will get additional integration with Sophos Firewall:<\/p>\n As with each Sophos Firewall launch, this model consists of a number of quality-of-life enhancements that make day-to-day administration simpler:<\/p>\n Obtain the total What\u2019s New Information<\/a> for a whole overview of all the good new options and enhancements in v21.5.<\/p>\n You possibly can obtain the improve bundle or installer for v21.5 from the Sophos Firewall v21.5 EAP Registration Web page<\/a>. Merely submit your particulars and the obtain hyperlinks might be emailed to you immediately.<\/p>\nEntra ID (Azure AD) single sign-on for distant entry VPN<\/strong><\/h2>\n
\n
Different VPN and scalability enhancements<\/strong><\/h2>\n
\n
Sophos DNS Safety<\/strong><\/h2>\n
\n
Streamlined administration and quality-of-life enhancements<\/strong><\/h2>\n
\n
Different enhancements<\/strong><\/h2>\n
\n
Get the total particulars<\/strong><\/h2>\n
Get began right now<\/strong><\/h2>\n