Sophos UTM 9.1 available!

You can download the update from 9.006005 to 9.100008 here: ftp.astaro.de

Up2Date-Informations
News

• Major Features
• Endpoint: Web Protection for UTM Endpoint
• Network/RED/Wifi: Support for MAC Address Filtering
• RED: Offline Provisioning
• VPN: SSL VPN Support for iOS and Android
• Wifi: Wireless Repeating and Bridging for AP50

Other Features

• WebAdmin: Replace “Traffic Lights” with Toggle-Switch Design
• WebAdmin: Replace Flash Charts with JavaScript-only Solution
• Endpoint: SAA for MacOS X
• Mail: SSL Support for POP3 Proxy
• Network: QoS Download Throttling
• Network: IPv6 Prefix Delegation
• Network: IPv6 Renumbering
• Network: DNSSEC Validation
• Network: Allow to specify direction of Country Blocking
• Network: Exceptions for Country Blocking
• Network: Increase Scalability of Network Reporting/Accounting
• Network: Multilink PPP Support
• Network: Amazon VPC IPSec Tunnel Support
• RED: Auto-Deauthorize
• RED: Improve UMTS Modem Support
• RED/VPN: Notifications for tunnel up/down
• VPN: SSL VPN Profiles
• VPN: Support for AES+GCM and AES+CTR Ciphers in IPSec
• WAF: Outlook Anywhere Passthrough Support
• Web: Complete Customization of Block Pages
• Web: Optionally Force Caching of Sophos Endpoint Updates
• Web: Allow to specify Maximum Download Size
• Wifi: Redirect Support for Hotspot
• General: Database Architecture Overhaul
• General: More Services Support Lock-Out after Failed Authentication
• General: Time-Events can Span Across Midnight

Comments

• System will be rebooted
• Configuration will be upgraded
• Database will be converted
• Connected Wifi APs will perform firmware upgrade
• Connected RED devices will perform firmware upgrade

Bugfixes

• 15089 Support for Outlook Anywhere via the Webapplication Firewall
• 17999 It’s not possible to take over the internet explorer(8 &9) proxy settings with the openvpn-gui client
• 18601 Checkbox ‘Mime blocking inspects HTTP body’ enabled does not work when Antivirus scanning is disabled
• 19006 Internet Explorer still doesn’t trust the webadmin certificate after importing the WebAdmin CA
• 20050 gzip deflate compression not working with WAF
• 21494 IPS report for pdf and csv is incorrect
• 21590 Fix SNMP traps for notifications
• 21825 Form hardening breaks ‘XHTML 1.0 strict’ compliance
• 21829 Timeframe and Department missing in PDF header lines
• 21857 Reporting: in the Top Applications by Client PDF export the total column is displayed twice
• 21861 Application Control Reporting: incorrect data in the exported pdf/xls
• 21892 Encryption User: Download PKCS#12 key doesn’t work if S/MIME is disabled
• 21898 Web Protection Reporting: missing sorting order in pdf under some circumstances
• 21928 SSL certificate exceptions do not work for urls with an IPv6 literal as hostname
• 21942 IPS notifications contain invalid links
• 21957 DHCP server not working properly with large IP ranges
• 21958 Live log for packetfilter shows numbers instead of the protocol
• 22371 The NAT rule object cannot use network group objects for the traffic destination attribute with uplink primary address
• 22546 RED Split-Tunneling via UMTS is not working properly
• 22634 Static IP address assignment for RED does not work together with transparent/split mode
• 23333 Blocked application name on the block page is truncated
• 24156 Search Engine Report => Top 10 pie has label with HTML br tag in description.

RPM packages contained

• AstaroPerl-5.10.1-1008.51.g45ee5d8.i686.rpm
• libapr-util1-1.4.1-2.g977c771.i686.rpm
• libapr1-1.4.6-0.126363967.g2272111.i686.rpm
• libaviraglue-9.06-1.g5aee986.i686.rpm
• libblkid1-2.19.1-6.31.1.933.gfe0d1b0.i686.rpm
• libcurl4-7.19.7-1.20.23.1.960.g3b79ccc.i686.rpm
• libdaemon0-0.12-31.6.996.g12c1a9f.i686.rpm
• libdb-4_5-4.5.20-95.39.136.gb65ae06.rb2.i686.rpm
• libdmg-hfsplus-20130211-0.126023540.gbe9a7cc.i686.rpm
• libgio-2_0-0-2.22.5-0.4.3.906.g010c59b.i686.rpm
• libglib-2_0-0-2.22.5-0.4.3.906.g010c59b.i686.rpm
• libgmime-2_4-2-2.4.26-10.gb6ce3fc.i686.rpm
• libgmodule-2_0-0-2.22.5-0.4.3.906.g010c59b.i686.rpm
• libgnutls26-2.4.1-24.39.39.1.895.g010c59b.i686.rpm
• libgobject-2_0-0-2.22.5-0.4.3.906.g010c59b.i686.rpm
• libgthread-2_0-0-2.22.5-0.4.3.906.g010c59b.i686.rpm
• libiconv-1.12-10.g1ff1a15.i686.rpm
• libldap-2_4-2-2.4.26-0.16.1.960.gfd2813d.i686.rpm
• libmnl-1.0.3-0.gf9b28ca.i686.rpm
• libnetfilter_conntrack-1.0.2-1.g184e586.i686.rpm
• libnetfilter_cthelper1-1.0.0-1.1.g6de5007.i686.rpm
• libnetfilter_cttimeout1-1.0.0-0.0.g0092074.i686.rpm
• libnetfilter_queue1-1.0.2-1.g9c7c000.i686.rpm
• libnewt0_52-0.52.10-1.32.1.6.gfd7c302.i686.rpm
• libnfnetlink-1.0.1-0.g0b383e2.i686.rpm
• libnl-3.2.13-1.2.gd74a7f0.i686.rpm
• libopenssl1_0_0-1.0.1e-1.1.1006.g75d1cfc.i686.rpm
• libreadline5-5.2-147.12.1.891.g3d45c85.i686.rpm
• libsaviglue-9.06-4.gf8d05f1.i686.rpm
• libtiff3-3.8.2-141.150.1.1008.g61ccc04.i686.rpm
• libuuid1-2.19.1-6.31.1.933.gfe0d1b0.i686.rpm
• libzypp-9.12.11-0.5.1.978.gcae4b9a.i686.rpm
• Mesa-7.11.2-0.7.3.967.gfd2813d.i686.rpm
• aaa_base-11-6.75.1.958.gfd2813d.i686.rpm
• app-accuracy-client-9.05-6.gcbb63ff.noarch.rpm
• atop-2.0.2-0.g5bf8f70.i686.rpm
• audit-libs-1.7.7-5.27.1.898.g010c59b.i686.rpm
• bash-3.2-147.12.1.891.g3d45c85.i686.rpm
• bind-libs-9.6ESVR7P4-0.8.1.959.gfd2813d.i686.rpm
• bind-utils-9.6ESVR7P4-0.8.1.959.gfd2813d.i686.rpm
• client-iphone-9.05-1.gb7a79e0.noarch.rpm
• client-ncp-9.06-1.g9e71d06.noarch.rpm
• client-openvpn-9.07-4.gb530236.noarch.rpm
• cm-nextgen-agent-9.07-2.g633db2e.i686.rpm
• conntrack-tools-1.4.0-3.g161b536.i686.rpm
• coreutils-8.12-6.23.1.896.g3d45c85.i686.rpm
• cron-4.1-194.203.1.913.g74c070b.i686.rpm
• csync2-1.34-10.g71beac6.i686.rpm
• ctasd-5.00.0042-1.ge8b80cf.i686.rpm
• curl-7.19.7-1.20.23.1.960.g3b79ccc.i686.rpm
• dbus-1-1.2.10-3.27.1.966.gfd2813d.i686.rpm
• dropwatch-1.4-1.5.g1c3e278.i686.rpm
• dwm-6.0-0.112362020.g755ae56.rb1.i686.rpm
• ethtool-3.7-0.g92ae321.i686.rpm
• freetype2-2.3.7-25.32.1.1009.g61ccc04.i686.rpm
• glib2-2.22.5-0.4.3.906.g010c59b.i686.rpm
• google-perftools-tcmalloc-2.0-1.3.g9075a02.i686.rpm
• gpg2-2.0.9-25.33.31.1.942.g5fdba77.i686.rpm
• grep-2.7-5.7.1.979.gcae4b9a.i686.rpm
• gtk2-libs-2.18.9-0.23.1.876.g77c280f.rb2.i686.rpm
• hal-0.5.12-23.68.1.994.g45b97f2.i686.rpm
• hwinfo-15.46-0.9.1.975.g9aac543.i686.rpm
• iproute2-3.4.0-1.ge19e870.i686.rpm
• ipset-6.16.1-1.0.g783f488.i686.rpm
• iptables-1.4.17-1.2.g6210a12.i686.rpm
• ipv6-aiccu-20070115-21.gd05718f.i686.rpm
• ipv6-miredo-1.2.5-1.gd589f8c.i686.rpm
• ipv6-tspc-1.2-6.gffcef23.i686.rpm
• irqd-0.7.0-1.0.132056842.g484b4ad.i686.rpm
• kernel-firmware-20130405-1.0.g1689aec.noarch.rpm
• kismet-2011_03_R2-0.118421946.g2a4fea8.i686.rpm
• login-3.41-0.4.2.963.g3b79ccc.i686.rpm
• lshw-B.02.16-0.ga049a00.i686.rpm
• macset-9.06-3.g1203f42.i686.rpm
• microcode_ctl-1.17-102.48.1.964.g3b79ccc.i686.rpm
• minicom-2.3-27.24.4.1.905.g14d7f56.i686.rpm
• mkinitrd-2.4.2-0.55.1.1032.g6fbfa4c.i686.rpm
• modauthnzaua-9.05-7.gfacb9ae.rb1.i686.rpm
• modauthzblacklist-9.07-7.gb44036c.i686.rpm
• modavscan-9.07-79.gef749df.i686.rpm
• modcookie-9.05-7.gfacb9ae.rb1.i686.rpm
• modfirehose-2.5_SVNr1309567-14.g4ab2622.i686.rpm
• modformhardening-9.07-20.ga46b792.i686.rpm
• modproxymsrpc-9.10-22.gba6dc2f.i686.rpm
• modsecurity2-2.5.12-607.gb6cac0f.i686.rpm
• modurlhardening-9.07-15.gbd21885.i686.rpm
• modwafexceptions-9.05-7.gfacb9ae.rb1.i686.rpm
• nmap-4.75-1.28.1.910.gcd8e721.i686.rpm
• openldap2-client-2.4.26-0.16.1.960.gfd2813d.i686.rpm
• openssh-5.1p1-41.55.1.914.gcd8e721.i686.rpm
• openssl-1.0.1e-1.1.1006.g75d1cfc.i686.rpm
• pciutils-3.1.7-11.7.1.897.g3d45c85.i686.rpm
• perf-tools-3.8.6-4.g0a2a8fa.i686.rpm
• perl-Authen-Radius-0.13-1.0.30132755.gdb7b5a2.rb1.noarch.rpm
• perl-Clone-0.34-1.0.g9781aee.i686.rpm
• perl-Crypt-SSLeay-0.64-1.467.ga5a42bd.i686.rpm
• perl-DBD-Pg-2.19.3-1.436.gcca6f22.i686.rpm
• perl-DBI-1.625-1.497.g9c8af75.i686.rpm
• perl-DateTime-0.78-1.517.g8e8a6ca.i686.rpm
• perl-DateTime-Format-Strptime-1.52-1.515.g8e8a6ca.noarch.rpm
• perl-DateTime-Locale-0.45-1.266.gda0d805.noarch.rpm
• perl-DateTime-TimeZone-1.56-1.514.g8e8a6ca.noarch.rpm
• perl-Digest-SHA1-2.11-1.487.g7ffb40d.rb1.i686.rpm
• perl-Encode-Locale-1.03-1.399.g64db15b.noarch.rpm
• perl-File-Listing-6.04-1.400.g64db15b.rb1.noarch.rpm
• perl-HTML-Form-6.03-1.394.g64db15b.rb1.noarch.rpm
• perl-HTML-Parser-3.69-1.487.gaae5bce.rb1.i686.rpm
• perl-HTTP-Cookies-6.01-1.395.g64db15b.rb1.noarch.rpm
• perl-HTTP-Daemon-6.01-1.396.g64db15b.rb1.noarch.rpm
• perl-HTTP-Date-6.02-1.0.ge84bc38.noarch.rpm
• perl-HTTP-Message-6.03-1.407.gdb625bf.rb1.noarch.rpm
• perl-HTTP-Negotiate-6.01-1.393.g64db15b.rb1.noarch.rpm
• perl-IO-Socket-INET6-2.56-1.126.ga23dede.rb2.noarch.rpm
• perl-IO-Socket-SSL-1.81-1.464.g9e059d0.noarch.rpm
• perl-JSON-Any-1.29-1.0.g82f719d.noarch.rpm
• perl-LWP-MediaTypes-6.02-1.0.g2ee2aeb.noarch.rpm
• perl-LWP-Protocol-https-6.03-1.489.g4db93ac.noarch.rpm
• perl-Module-Signature-0.55-1.595.g6e4c64e.noarch.rpm
• perl-Mozilla-CA-20120309-1.569.ga48f480.noarch.rpm
• perl-Net-HTTP-6.05-1.467.g9e059d0.noarch.rpm
• perl-Net-IDN-Encode-2.003-1.0.g45bbfac.i686.rpm
• perl-Net-MAC-Vendor-1.18-1.601.g84dc17c.noarch.rpm
• perl-Net-SSLeay-1.49-1.466.g9e059d0.i686.rpm
• perl-Package-DM-0.11-1.600.g45e6b8f.noarch.rpm
• perl-SQL-Statement-1.402-1.0.gba41769.noarch.rpm
• perl-TimeDate-1.16-1.259.ga32f862.noarch.rpm
• perl-URI-ParseSearchString-3.44-1.310.g2b8da94.noarch.rpm
• perl-WWW-Curl-4.15-1.461.ge615add.i686.rpm
• perl-WWW-RobotRules-6.02-1.0.g02f52c7.noarch.rpm
• perl-libwww-perl-6.04-1.391.g64db15b.rb1.noarch.rpm
• postfix-2.10.0-0.g4abca6b.i686.rpm
• postgresql-8.4.14-68.g53576df.i686.rpm
• postgresql92-9.2.4-0.gc4d359c.i686.rpm
• procps-3.2.7-151.26.1.988.g8697db8.i686.rpm
• radvd-1.9.2-1.g2fb0c2a.i686.rpm
• red-firmware2-2016-0.gc196366.noarch.rpm
• rsync-3.0.4-2.40.1.905.g010c59b.i686.rpm
• rzsz-0.12.20-934.22.904.g14d7f56.i686.rpm
• satsolver-tools-0.17.6-0.5.1.963.gfd2813d.i686.rpm
• slang-2.1.1-58.18.72.gb65ae06.rb1.i686.rpm
• sysvinit-2.86-215.1.892.g921f965.i686.rpm
• tcpdump-3.9.8-1.21.1543.g31c8eb0.i686.rpm
• timezone-2013b-0.4.1.1316.g2ddbd60.i686.rpm
• tools-9.06-11.g7245206.i686.rpm
• udev-147-0.65.1.962.g3b79ccc.i686.rpm
• ulogd-2.1.0-44.g234f44e.i686.rpm
• usb-modeswitch-1.2.5-5.g6c2929c.i686.rpm
• util-linux-2.19.1-6.31.1.933.gfe0d1b0.i686.rpm
• vineyard-plugin-3-0.129657955.g5eab1c2.i686.rpm
• vineyard-plugin-tib-3-0.129657955.g5eab1c2.i686.rpm
• xorg-x11-Xvnc-7.4-27.66.1.875.g77c280f.rb2.i686.rpm
• xtables-addons-1.47.1-0.g0bae385.i686.rpm
• zypper-1.6.167-0.7.2.962.gfd2813d.i686.rpm
• ep-reporting-9.10-6.gd616f7f.i686.rpm
• ep-reporting-c-9.10-1.gd7b378a.i686.rpm
• ep-reporting-resources-9.10-6.gd616f7f.i686.rpm
• ep-aua-9.10-5.g19bb80d.i686.rpm
• ep-awed-9.07-1.g40f6ed9.i686.rpm
• ep-branding-ASG-afg-9.10-4.g4ec0212.noarch.rpm
• ep-branding-ASG-ang-9.10-4.g4ec0212.noarch.rpm
• ep-branding-ASG-asg-9.10-4.g4ec0212.noarch.rpm
• ep-branding-ASG-atg-9.10-4.g4ec0212.noarch.rpm
• ep-branding-ASG-aug-9.10-4.g4ec0212.noarch.rpm
• ep-client-endpoint-1.0.0-43.gd5d84f0.rb2.i686.rpm
• ep-cloud-ec2-9.07-1.gedf2481.i686.rpm
• ep-confd-9.10-51.g7b6cbe4.i686.rpm
• ep-confd-tools-9.07-75.g8b09a31.rb1.i686.rpm
• ep-confd-turksat-xml-rpc-proxy-9.07-3.gb15d411.rb1.i686.rpm
• ep-cssd-9.07-15.g9a8c086.i686.rpm
• ep-ctmon-9.05-2.g6c7853a.i686.rpm
• ep-epsecd-9.10-7.gd65790f.i686.rpm
• ep-ha-9.10-2.g20f5384.i686.rpm
• ep-ha-confd-9.05-4.g2f2f7bf.i686.rpm
• ep-ha-daemon-9.05-2.g03dd695.i686.rpm
• ep-hardware-9.07-6.g235b824.i686.rpm
• ep-hotspot-web-9.07-1.gf16f09a.rb1.i686.rpm
• ep-hotspotd-9.06-3.g1203f42.i686.rpm
• ep-init-9.07-5.g1563b28.noarch.rpm
• ep-ipsfb-9.07-3.gf6ba967.i686.rpm
• ep-ipv6-watchdog-0.5-0.123940965.gc204db3.i686.rpm
• ep-libs-9.07-27.g883f72a.i686.rpm
• ep-license-tools-9.10-0.124462952.ge280d4a.i686.rpm
• ep-localization-afg-9.10-27.g812aeda.i686.rpm
• ep-localization-ang-9.10-27.g812aeda.i686.rpm
• ep-localization-asg-9.10-27.g812aeda.i686.rpm
• ep-localization-atg-9.10-27.g812aeda.i686.rpm
• ep-localization-aug-9.10-27.g812aeda.i686.rpm
• ep-logging-9.06-1.g6cfb97e.i686.rpm
• ep-mail-templates-9.06-2.g96eb0ef.noarch.rpm
• ep-mdw-9.10-49.gf7c469d.i686.rpm
• ep-notifier-9.10-1.g07e89cd.i686.rpm
• ep-postgresql-9.05-40.g7414cd8.i686.rpm
• ep-postgresql-base-9.06-15.g726d644.i686.rpm
• ep-postgresql92-9.07-13.g685af4d.i686.rpm
• ep-raidtools-9.05-4.gc9728fe.rb1.i686.rpm
• ep-red-9.10-30.gc9b77e9.i686.rpm
• ep-red-windows-driver-9.06-10.g6ddfd31.i686.rpm
• ep-red-windows-service-9.10-2.g5d6c534.i686.rpm
• ep-release-9.100-8.noarch.rpm
• ep-repctl-0.1-0.132152736.ga8f9357.i686.rpm
• ep-saa-mac-1.0.0-0.127219332.gd46fe0e.i686.rpm
• ep-samba-9.10-1.g57caaa0.noarch.rpm
• ep-screenmgr-9.07-0.gfa1fd0b.rb2.i686.rpm
• ep-selfmon-9.07-6.ga4bddfd.i686.rpm
• ep-service-monitor-1.0-13.g2efd61c.i686.rpm
• ep-syslog-ng-9.05-1.g7d3f5ae.noarch.rpm
• ep-tools-9.07-1.gc3b64bb.i686.rpm
• ep-ulogd-9.10-1.gaa06d05.noarch.rpm
• ep-up2date-9.07-5.g1da728b.i686.rpm
• ep-up2date-downloader-9.07-5.g1da728b.i686.rpm
• ep-up2date-pattern-install-9.07-5.g1da728b.i686.rpm
• ep-up2date-system-install-9.07-5.g1da728b.i686.rpm
• ep-urid-9.07-8.g427c5c1.i686.rpm
• ep-webadmin-9.10-63.g425cd13.i686.rpm
• ep-webadmin-contentmanager-9.10-3.gf830878.i686.rpm
• ep-wireless-firmware-4020-0.g5e99075.i586.rpm
• u2d-appctrl3-9-14.i686.rpm
• u2d-avira3-9-1715.i686.rpm
• u2d-cadata-9-40.i686.rpm
• u2d-ipsbundle-9-71.i686.rpm
• ep-chroot-bind-9.06-4.gcce3b3a.noarch.rpm
• ep-chroot-ha_proxy-9.05-2.g172f835.i686.rpm
• ep-chroot-httpd-9.07-15.g08b98ac.noarch.rpm
• ep-chroot-ipsec-9.06-3.g9c93d0a.noarch.rpm
• ep-chroot-openvpn-9.05-3.g0812755.i686.rpm
• ep-chroot-ppp-9.10-36.2.g1564bbe.noarch.rpm
• ep-chroot-pppoe-9.10-36.2.g1564bbe.noarch.rpm
• ep-chroot-pptpc-9.05-3.gf7f3704.noarch.rpm
• ep-chroot-quagga-9.06-3.g51a7f4a.noarch.rpm
• ep-chroot-smtp-9.10-8.g600ada9.i686.rpm
• chroot-afc-9.07-4.gdb94c36.i686.rpm
• chroot-bind-9.9.2_P2-0.g0dd9651.rb1.i686.rpm
• chroot-clientlessvpn-9.06-2.g08892d7.i686.rpm
• chroot-ftp-9.07-3.gcbf7e6f.i686.rpm
• chroot-ha_proxy-1.8.1-12.g172f835.i686.rpm
• chroot-httpd-2.4.4-1.g2fe150a.i686.rpm
• chroot-httpd-mod-fcgid-2.3.7-0.g0ba225c.i686.rpm
• chroot-httpd-mod-websocket-proxy-9.07-6.g89ab476.i686.rpm
• chroot-ipsec-9.07-4.g2cf589c.i686.rpm
• chroot-openvpn-9.07-1.g7908a56.i686.rpm
• chroot-ppp-2.4.6-6.g0b15aa5.i686.rpm
• chroot-pppoe-2.4.6-6.g0b15aa5.i686.rpm
• chroot-pptp-9.06-1.gadc9b46.i686.rpm
• chroot-pptpc-9.05-3.g347cc1a.i686.rpm
• chroot-reverseproxy-2.4.4-71.g5a2f4ba.i686.rpm
• chroot-smtp-9.05-5.g098d227.i686.rpm
• chroot-socks-9.05-7.gdee3abf.i686.rpm
• dhcp-chroot-client-4.1.2_ESV_R8-1.g89d662c.i686.rpm
• dhcp-chroot-server-4.1.2_ESV_R8-1.g89d662c.i686.rpm
• ep-chroot-pop3-9.10-29.g5ab66c7.i686.rpm
• ep-httpproxy-9.10-18.g8a6c66d.i686.rpm
• quagga-chroot-0.99.22-9.gbed9c61.i686.rpm
• kernel-smp-3.8.6-4.g0a2a8fa.i686.rpm
• kernel-smp64-3.8.6-4.g0a2a8fa.x86_64.rpm

/edit: Sophos replaced the update because many users had several problems. The newer update is available via ftp://ftp.astaro.com/UTM/v9/up2date/u2d-sys-9.006005-100012.tgz.gpg but do not install it on your existing 9.1 UTM!!! Sophos will publish an update soon for this!

Some problems:

• license is claimed to be invalid after update for 525 and 625 appliances
• device agent does not start
• some warnings in kernel.log RAID Write SAME failed
• and AFCd crashing.
• AD users cannot login to Webadmin

we also have big problems with SSL VPN, we are getting many disconnects with “broken pipe” messages in the logs.