{"id":167573,"date":"2025-02-24T19:59:05","date_gmt":"2025-02-24T18:59:05","guid":{"rendered":"https:\/\/www.avanet.com\/blog\/sophos-firewall-v21-mr1\/"},"modified":"2025-02-24T21:31:51","modified_gmt":"2025-02-24T20:31:51","slug":"sophos-firewall-v21-mr1","status":"publish","type":"post","link":"https:\/\/www.avanet.com\/en\/blog\/sophos-firewall-v21-mr1\/","title":{"rendered":"Sophos Firewall v21 MR1: New functions and improvements"},"content":{"rendered":"\n<p>The new <strong>Sophos Firewall v21 MR1<\/strong> version fixes bugs and adds a few new features. In this article, we present all the new features and optimizations of the current version &#8211; from extended SSL VPN functions to SD-WAN improvements. <\/p>\n\n<p>The update is only for Sophos Firewalls of the XGS series. The <a href=\"https:\/\/www.avanet.com\/en\/blog\/the-time-to-switch-to-the-xgs-firewall-hardware-is-coming-soon\/\">XG firewalls will soon be available at the end of March 2025 End of Life<\/a>. <\/p>\n\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Topics<\/h2><nav><ul><li class=\"\"><a href=\"#neue-funktionen-im-uberblick\">New functions at a glance<\/a><ul><li class=\"\"><a href=\"#ssl-vpn-und-neue-diffie-hellman-key-sizes\">SSL VPN and new Diffie-Hellman key sizes<\/a><\/li><li class=\"\"><a href=\"#nat-64-unterstutzung-uber-den-proxy\">NAT64 support via the proxy<\/a><\/li><li class=\"\"><a href=\"#optimierungen-fur-mobile-module-4-g-5-g\">Optimizations for mobile modules (4G\/5G)<\/a><\/li><li class=\"\"><a href=\"#sd-wan-erweiterungen-und-support-optimierungen\">SD-WAN extensions and support optimizations<\/a><\/li><\/ul><\/li><li class=\"\"><a href=\"#source\">Sources<\/a><\/li><\/ul><\/nav><\/div>\n\n<h2 class=\"wp-block-heading\" id=\"neue-funktionen-im-uberblick\">New functions at a glance<\/h2>\n\n<h3 class=\"wp-block-heading\" id=\"ssl-vpn-und-neue-diffie-hellman-key-sizes\">SSL VPN and new Diffie-Hellman key sizes<\/h3>\n\n<p>A key component of the new version is the expansion of the SSL VPN functionalities. With immediate effect, <strong>Sophos Firewall v21 MR1<\/strong> supports new Diffie-Hellman key sizes of <strong>3072 and 4096 bits<\/strong>. This adjustment enables companies to increase the security standard even further &#8211; without making any changes to Sophos Connect or the existing SSL VPN configurations. Administrators can find the setting directly under the global settings of the firewall in the SSL VPN section.   <\/p>\n\n<div class=\"wp-block-stackable-image stk-block-image stk-block stk-cf627a7\" data-block-id=\"cf627a7\"><style>.stk-cf627a7 .stk-img-figcaption{text-align:center !important;color:#abb7c2 !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch stk--has-lightbox\"><img loading=\"lazy\" decoding=\"async\" class=\"stk-img wp-image-167567\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-scaled.jpg\" width=\"2560\" height=\"1920\" alt=\"Sophos Firewall v21 MR1 - Diffie-Hellman-Key 4096 Bit\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-scaled.jpg 2560w, https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-300x225.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-1024x768.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-768x576.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-1536x1152.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-2048x1536.jpg 2048w, https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-600x450.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-v21-mr1-4096-bit-64x48.jpg 64w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/span><figcaption class=\"has-text-color stk-img-figcaption\">Sophos Firewall v21 MR1 &#8211; Diffie-Hellman-Key 4096 Bit<\/figcaption><\/figure><\/div>\n\n<h3 class=\"wp-block-heading\" id=\"nat-64-unterstutzung-uber-den-proxy\">NAT64 support via the proxy<\/h3>\n\n<p>For customers who use the explicit standard proxy, there is another innovation: thanks to the new version, IPv4 addresses can be accessed via the proxy &#8211; even if your own network only supports IPv6. This scenario, which occurs in the classic NAT64 environment, is now fully supported. This enables seamless integration and communication between the different protocols.  <\/p>\n\n<h3 class=\"wp-block-heading\" id=\"optimierungen-fur-mobile-module-4-g-5-g\">Optimizations for mobile modules (4G\/5G)<\/h3>\n\n<p>The <strong>Sophos Firewall v21 MR1<\/strong> also takes into account the challenges of using mobile modules. Connection monitoring has been improved, especially for 4G and 5G modules. Traditionally, many providers do not allow pinging to their own gateway address. In order to still obtain meaningful monitoring data, monitoring has now been switched to connections to Google. This change ensures more precise status information and supports smooth operation, even in mobile networks.    <\/p>\n\n<h3 class=\"wp-block-heading\" id=\"sd-wan-erweiterungen-und-support-optimierungen\">SD-WAN extensions and support optimizations<\/h3>\n\n<p>In the SD-WAN area, enhancements have been made to simplify support and administration. One example of this is the improved access for Salesforce support. Especially for installations of new SD-RED-solutions &#8211; where access can sometimes be challenging &#8211; the new functions offer more efficient support from Software Support. These adjustments not only make it easier to diagnose errors, but also help to minimize downtime.   <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"source\">Sources<\/h2>\n\n<p>For further information and in-depth details, we recommend the following resources:<\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>External links:<\/strong>\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/news.sophos.com\/en-us\/2025\/02\/19\/sophos-firewall-v21-mr1-is-now-available\/\" target=\"_blank\" rel=\"noreferrer noopener\">Sophos News: Sophos Firewall v21 MR1- Release Announcement<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/community.sophos.com\/sophos-xg-firewall\/b\/blog\/posts\/sophos-firewall-os-v21-mr1-is-now-available\" target=\"_blank\" rel=\"noreferrer noopener\">Sophos Community: Sophos Firewall v21 MR1 blog post<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/docs.sophos.com\/releasenotes\/index.html?productGroupID=nsg&amp;productID=xg&amp;versionID=21.0\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><a href=\"https:\/\/docs.sophos.com\/releasenotes\/index.html?productGroupID=nsg&amp;productID=xg&amp;versionID=21.0\" target=\"_blank\" rel=\"noreferrer noopener\">Sophos Firewall v21 MR1: Official Release Notes<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The new Sophos Firewall v21 MR1 version fixes bugs and adds a few new features. In this article, we present all the new features and optimizations of the current version &#8211; from extended SSL VPN functions to SD-WAN improvements. The update is only for Sophos Firewalls of the XGS series. The XG firewalls will soon [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":159536,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[277],"tags":[],"class_list":["post-167573","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/posts\/167573","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/comments?post=167573"}],"version-history":[{"count":0,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/posts\/167573\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/media\/159536"}],"wp:attachment":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/media?parent=167573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/categories?post=167573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/tags?post=167573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}