{"id":132106,"date":"2020-11-10T12:00:00","date_gmt":"2020-11-10T11:00:00","guid":{"rendered":"https:\/\/www.avanet.com\/blog\/sophos-sfos-nuove-funzionalita-in-v18-0-3-mr3\/"},"modified":"2023-09-19T12:45:55","modified_gmt":"2023-09-19T11:45:55","slug":"sophos-sfos-nuove-funzionalita-in-v18-0-3-mr3","status":"publish","type":"post","link":"https:\/\/www.avanet.com\/it\/blog\/sophos-sfos-nuove-funzionalita-in-v18-0-3-mr3\/","title":{"rendered":"Sophos SFOS &#8211; Nuove funzionalit\u00e0 in v18.0.3 MR3"},"content":{"rendered":"\n<p>Gli amministratori che hanno gi\u00e0 aggiornato il loro XG Firewall alla versione 17.5 MR13 e MR14 aspettavano questo aggiornamento da molto tempo. Ma per tutti gli altri, la <strong>v18 MR3<\/strong> porta anche 34 correzioni di bug e alcune nuove funzionalit\u00e0.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-upgrade-auf-v18\">Aggiornamento alla versione 18<\/h2>\n\n<p>Attualmente esistono ancora due versioni diverse di SFOS, che vengono aggiornate da Sophos. Esiste la <strong>versione 17.5<\/strong> (MR6 &#8211; MR14.1) e la <strong>versione 18<\/strong> (MR1 e MR2).<\/p>\n\n<p>Gli utenti di un XG 85 o XG 105 non possono eseguire l&#8217;aggiornamento alla versione 18 a causa della RAM insufficiente. Per questo motivo <a href=\"https:\/\/www.avanet.com\/blog\/sophos-xg-85-und-xg-105-end-of-sale\/\">anche <\/a>queste <a href=\"https:\/\/www.avanet.com\/blog\/sophos-xg-85-und-xg-105-end-of-sale\/\">apparecchiature firewall <\/a>sono <a href=\"https:\/\/www.avanet.com\/blog\/sophos-xg-85-und-xg-105-end-of-sale\/\">End of Sale <\/a>e ci sono modelli successivi corrispondenti. Per i clienti con questi dispositivi pi\u00f9 vecchi, Sophos continua a mantenere aggiornata la versione 17.5, almeno in termini di correzioni di bug e aggiornamenti di sicurezza.<\/p>\n\n<p>Per beneficiare delle ultime funzionalit\u00e0, \u00e8 consigliabile effettuare l&#8217;aggiornamento ai nuovi modelli che supportano la v18. Per rendere la decisione un po&#8217; pi\u00f9 facile per i clienti con dispositivi pi\u00f9 vecchi, Sophos offre una promo di rinnovo fino alla fine dell&#8217;anno, con la quale si ottiene il 50% del nuovo hardware del firewall gratuitamente. L&#8217;altra opzione sarebbe quella di aspettare fino al 2021 Q2&#8230;.<strong>(SPOILER<\/strong>: Nuova serie hardware in uscita. \ud83e\udd2b)<\/p>\n\n<p>Per i firewall che supportano la versione 18, tuttavia, l&#8217;aggiornamento non \u00e8 stato cos\u00ec semplice fino ad ora. Finora esisteva un percorso di migrazione alla versione 18 funzionante solo per le versioni da 17.5 MR6 a MR12. Chi nel frattempo aveva gi\u00e0 installato MR13 o MR14, al momento dell&#8217;aggiornamento manuale alla v18 si trovava di fronte a un reset di fabbrica e perdeva l&#8217;intera configurazione.<\/p>\n\n<p>Con la v18 MR3 c&#8217;\u00e8 di nuovo un percorso di aggiornamento. Inoltre, vediamo che con i nostri clienti della versione 17.5 l&#8217;aggiornamento alla versione 18 viene suggerito automaticamente sul firewall per la prima volta. Sophos \u00e8 quindi fiduciosa e ha acquisito un&#8217;esperienza sufficiente con la v18 per rendere disponibile l&#8217;aggiornamento a tutti i clienti.<\/p>\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Anche le nostre esperienze con la v18 e la v18 MR3 sono piuttosto positive. Raccomandiamo pertanto l&#8217;aggiornamento alla versione 18. \ud83d\ude4c<\/p><\/blockquote>\n\n<h3 class=\"wp-block-heading\" id=\"h-wieso-v18-ein-richtig-guter-release-ist\">Perch\u00e9 la v18 \u00e8 un&#8217;ottima release?<\/h3>\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/www.avanet.com\/it\/blog\/sophos-sfos-v18-nuove-funzionalita-in-sintesi\/\">Ci sono alcune nuove funzionalit\u00e0 in SFOS v18<\/a><\/li><li><a href=\"https:\/\/www.avanet.com\/it\/blog\/sophos-central-firewall-management-funzioni-con-sfos-v18\/\">Con SFOS v18 sono state introdotte nuove funzionalit\u00e0 per la gestione centrale del firewall.<\/a><\/li><\/ul>\n\n<p>Lo stesso firewall \u00e8 diventato molto pi\u00f9 veloce con l&#8217;aggiornamento del software alla versione 18! \ud83d\ude80<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" data-id=\"13597\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-1024x576.jpg\" alt=\"Sophos Firewall OS - Incremento delle prestazioni v18.0 MR3\" class=\"wp-image-13597\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-1024x576.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-64x36.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-300x169.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-600x338.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-768x432.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-1536x864.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost-18x10.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-performance-boost.jpg 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Sulla serie 100 (XG 86 &#8211; XG 135) l&#8217;interfaccia web \u00e8 diventata un po&#8217;<strong>pi\u00f9 veloce<\/strong>, ma la linea di fondo \u00e8 ancora <strong>dannatamente lenta!<\/strong> \ud83d\udc0c<\/p><\/blockquote>\n\n<h2 class=\"wp-block-heading\" id=\"vpn-performance-verbesserungen\">Miglioramenti delle prestazioni della VPN<\/h2>\n\n<p>Le prestazioni di SSL VPN sono state migliorate nella versione 18 MR3. Sui modelli di hardware pi\u00f9 grandi sono ora supportate molte pi\u00f9 connessioni parallele rispetto alla versione precedente di SFOS.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-2 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"156\" data-id=\"13599\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-1024x156.jpg\" alt=\"Sophos Firewall SFOS v18 MR3 Aggiornamento Tabella prestazioni SSLVPN XG 86 - XG 135\" class=\"wp-image-13599\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-1024x156.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-64x10.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-300x46.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-600x91.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-768x117.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-1536x233.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135-18x3.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg86-135.jpg 1554w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-3 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"182\" data-id=\"13600\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330-1024x182.jpg\" alt=\"Sophos Firewall SFOS v18 MR3 Aggiornamento Tabella prestazioni SSLVPN XG 210 - XG 330\" class=\"wp-image-13600\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330-1024x182.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330-64x11.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330-300x53.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330-600x107.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330-768x136.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330-18x3.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg210-330.jpg 1328w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-4 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"156\" data-id=\"13601\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-1024x156.jpg\" alt=\"Sophos Firewall SFOS v18 MR3 Aggiornamento Tabella prestazioni SSLVPN XG 430 - XG 750\" class=\"wp-image-13601\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-1024x156.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-64x10.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-300x46.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-600x91.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-768x117.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-1536x233.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750-18x3.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-sslvpn-performance-xg430-750.jpg 1554w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<h2 class=\"wp-block-heading\" id=\"secure-storage-master-key-ssmk\">Chiave master di archiviazione sicura (SSMK)<\/h2>\n\n<p>Se si \u00e8 eseguito l&#8217;aggiornamento e poi si accede come amministratore, viene visualizzata la seguente schermata:<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-5 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"662\" data-id=\"13602\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create-1024x662.jpg\" alt=\"Sophos Firewall - Chiave master di archiviazione sicura (SSMK)\" class=\"wp-image-13602\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create-1024x662.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create-64x41.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create-300x194.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create-600x388.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create-768x496.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create-18x12.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-create.jpg 1260w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<h3 class=\"wp-block-heading\" id=\"hintergrund-zu-diesen-anderungen\">Il contesto di queste modifiche<\/h3>\n\n<p>Sophos aveva una <a href=\"https:\/\/www.avanet.com\/it\/blog\/chiusa-la-vulnerabilita-sql-injection-di-sophos-sfos\/\">vulnerabilit\u00e0 in SFOS<\/a> qualche mese fa. Ancora pi\u00f9 indietro, c&#8217;era il problema che la password dell&#8217;amministratore poteva essere letta dai file di backup con un piccolo sforzo. Di conseguenza, \u00e8 stata introdotta anche la crittografia di backup. Sophos prende molto sul serio la questione e si \u00e8 impegnata a fondo per garantire che ci\u00f2 non si ripeta. La tabella di marcia prevista \u00e8 stata posticipata di mezzo anno e ci si \u00e8 occupati prima della sicurezza del sistema. Gli incidenti hanno dimostrato che anche un firewall, che dovrebbe proteggere dalle minacce, \u00e8 vulnerabile.<\/p>\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Il detto &#8220;la certezza al 100% non esiste&#8221; non \u00e8 privo di ragione. Molti film o serie sarebbero molto noiosi se ci fosse questa certezza al 100%. \ud83d\ude0b<\/p><\/blockquote>\n\n<p>Ora, con la v18 MR3, c&#8217;\u00e8 una nuova <strong>Secure Storage Master Key<\/strong>. Questa chiave pu\u00f2 essere creata solo dall&#8217;utente amministratore. Questo non funziona con un altro utente con diritti di amministratore. Definendo questa nuova chiave, le informazioni importanti vengono ulteriormente crittografate. Se volete sapere cosa succede esattamente in questo caso, potete leggere il <a href=\"https:\/\/www.avanet.com\/assets\/sophos-security-sfos-secure-storage-faq-en.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">documento Secure Storage<\/a>.<\/p>\n\n<p>Create quindi una password sicura e salvatela in modo sicuro.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-6 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"624\" data-id=\"13603\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password-1024x624.jpg\" alt=\"Sophos Firewall - Creare la chiave master di archiviazione sicura\" class=\"wp-image-13603\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password-1024x624.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password-64x39.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password-300x183.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password-600x366.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password-768x468.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password-18x12.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-secure-storage-master-key-set-password.jpg 1260w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<h2 class=\"wp-block-heading\" id=\"captcha-deaktivieren\">Disattivare Captcha<\/h2>\n\n<p>La finestra di login del firewall \u00e8 stata dotata di un captcha dopo la vulnerabilit\u00e0 della sicurezza sopra menzionata per UserPortal e Admin-Login.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-7 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"721\" data-id=\"13604\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-1024x721.jpg\" alt=\"Sophos Firewall WebAdmin Login con Captcha\" class=\"wp-image-13604\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-1024x721.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-64x45.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-300x211.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-600x422.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-768x541.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-1536x1081.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen-18x12.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-admin-loginscreen.jpg 1946w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p>Con MR3, questa protezione bot pu\u00f2 essere disattivata. A tal fine, \u00e8 necessario accedere al firewall tramite SSH e passare alla console con la voce da tastiera &#8220;4&#8221;.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-8 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"567\" data-id=\"13605\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-1024x567.jpg\" alt=\"Sophos Firewall SSH - Console del dispositivo\" class=\"wp-image-13605\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-1024x567.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-64x35.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-300x166.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-600x332.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-768x425.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-1536x850.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login-18x10.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-login.jpg 1769w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p>Qui \u00e8 possibile attivare, disattivare o visualizzare l&#8217;impostazione captcha per le finestre di login con il seguente comando.<\/p>\n\n<pre class=\"wp-block-code\"><code>console&gt; system captcha-authentication-global enable\/disable\/show for userportal\/webadminconsole<\/code><\/pre>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-9 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"567\" data-id=\"13606\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-1024x567.jpg\" alt=\"Sophos Firewall - disabilitare il captcha di accesso a SSH WebAdmin\" class=\"wp-image-13606\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-1024x567.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-64x35.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-300x166.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-600x332.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-768x425.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-1536x850.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha-18x10.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-ssh-disable-captcha.jpg 1769w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<h2 class=\"wp-block-heading\" id=\"device-access-warnhinweise\">Avvertenze sull&#8217;accesso al dispositivo<\/h2>\n\n<p>Come le due funzioni superiori, anche gli avvisi di accesso al dispositivo sono destinati a garantire una maggiore sicurezza.<\/p>\n\n<p>Alla voce di menu: &#8220;Amministrazione &gt; Accesso al dispositivo&#8221; \u00e8 possibile definire l&#8217;accesso ai servizi del firewall.<\/p>\n\n<p>In questo caso si dovrebbe procedere secondo il seguente principio: <strong>Chiudere tutto e aprire consapevolmente<\/strong>. Attivando la casella di controllo per &#8220;Ping&#8221; o &#8220;Portale utente&#8221;, ad esempio, si consente a qualsiasi computer del mondo di raggiungere il firewall tramite ICMP o Portale utente.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-10 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"754\" data-id=\"13607\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-1024x754.jpg\" alt=\"Sophos Firewall - Protezione dell'accesso ai dispositivi Accesso WAN\" class=\"wp-image-13607\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-1024x754.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-64x47.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-300x221.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-600x442.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-768x565.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-1536x1130.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-16x12.jpg 16w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access.jpg 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p>Naturalmente \u00e8 possibile modificare le impostazioni come prima. Il sistema ora emette un messaggio di avvertimento. In questo modo si dovrebbe essere consapevoli di ci\u00f2 che si sta aprendo al mondo esterno, attivando una casella di controllo nella zona WAN.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-11 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"688\" data-id=\"13608\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-1024x688.jpg\" alt=\"Sophos Firewall - Avviso accesso dispositivo accesso WAN\" class=\"wp-image-13608\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-1024x688.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-64x43.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-300x201.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-600x403.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-768x516.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-1536x1031.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning-18x12.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-device-access-warning.jpg 1802w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p>\u00c8 preferibile utilizzare la regola &#8220;Local service ACL exeption rule&#8221; per definire con maggiore precisione la provenienza del traffico. Ad esempio, selezionare solo il proprio Paese per l&#8217;accesso al portale utente o solo gli IP che possono, devono o devono effettivamente raggiungere il firewall tramite ICMP durante il ping.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"sophos-central-firewall-management\">Gestione di Sophos Central Firewall<\/h2>\n\n<h3 class=\"wp-block-heading\" id=\"high-availability-cluster-ansicht\">Vista del cluster ad alta disponibilit\u00e0<\/h3>\n\n<p>Tutti gli ascoltatori del nostro podcast sanno che Central Firewall Manager \u00e8 un prodotto in cui vedo molto potenziale. Si pu\u00f2 ancora dire che \u00e8 in fase di sviluppo, ma la versione 18 MR3 corregge una cosa davvero spiacevole.<\/p>\n\n<p>I cluster HA non sono pi\u00f9 visualizzati come online e offline, ma \u00e8 ora facile vedere quali firewall sono stati configurati per formare un cluster.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-12 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"278\" data-id=\"13609\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-1024x278.jpg\" alt=\"Vista del cluster di Sophos Central Firewall Manager ad alta disponibilit&#xE0;\" class=\"wp-image-13609\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-1024x278.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-64x17.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-300x81.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-600x163.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-768x208.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-1536x416.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-18x5.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster.jpg 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p>Se si fa clic con il mouse sul display di stato, vengono visualizzate ulteriori informazioni. Questo indica che l&#8217;unit\u00e0 \u00e8 in un cluster attivo-passivo e che \u00e8 il dispositivo ausiliario.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-13 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"543\" data-id=\"13610\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble-1024x543.jpg\" alt=\"Dettaglio vista del cluster ad alta disponibilit&#xE0; di Sophos Central Firewall Manager\" class=\"wp-image-13610\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble-1024x543.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble-64x34.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble-300x159.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble-600x318.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble-768x407.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble-18x10.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-ha-cluster-bubble.jpg 1442w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<h3 class=\"wp-block-heading\" id=\"geplante-updates\">Aggiornamenti previsti<\/h3>\n\n<p>\u00c8 ora possibile pianificare gli aggiornamenti del firmware tramite il Central Firewall Manager. Gli amministratori di UTM lo sanno bene.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-14 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"397\" data-id=\"13611\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-1024x397.jpg\" alt=\"Opzione di aggiornamento di Sophos Central Firewall Manager\" class=\"wp-image-13611\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-1024x397.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-64x25.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-300x116.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-600x233.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-768x298.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-1536x596.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update-18x7.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-overview-update.jpg 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p>Per un aggiornamento pianificato, \u00e8 anche possibile selezionare pi\u00f9 firewall contemporaneamente, il che \u00e8 un enorme sollievo negli ambienti pi\u00f9 grandi.<\/p>\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Tuttavia, questa caratteristica va presa con le molle. Anche un aggiornamento pu\u00f2 causare problemi.<\/p><\/blockquote>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-15 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"674\" data-id=\"13612\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-1024x674.jpg\" alt=\"Sophos Firewall OS - Aggiornamento programmato di Central Firewall Manager\" class=\"wp-image-13612\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-1024x674.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-64x42.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-300x197.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-600x395.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-768x505.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-1536x1010.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update-18x12.jpg 18w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-schedule-update.jpg 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p>Nella schermata qui sopra, si pu\u00f2 notare che alcuni aggiornamenti devono ancora essere installati in questo ambiente. \ud83d\ude05<\/p>\n\n<p>Se un firewall \u00e8 in fase di aggiornamento, ci\u00f2 \u00e8 indicato da un&#8217;icona animata nella panoramica. Fare clic su di esso per ottenere ulteriori informazioni.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-16 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1004\" height=\"610\" data-id=\"13613\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress.jpg\" alt=\"Sophos Firewall OS - Avanzamento dell'aggiornamento di Central Firewall Manager\" class=\"wp-image-13613\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress.jpg 1004w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress-64x39.jpg 64w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress-300x182.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress-600x365.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress-768x467.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-sfos-v18-mr3-central-firewall-manager-update-progress-18x12.jpg 18w\" sizes=\"auto, (max-width: 1004px) 100vw, 1004px\" \/><\/a><\/figure>\n<\/figure>\n\n<h2 class=\"wp-block-heading\" id=\"weitere-erneuerungen\">Ulteriori rinnovi<\/h2>\n\n<p>Ci sono altre caratteristiche in questa versione, ma non le analizzer\u00f2 in dettaglio. Per completezza, tuttavia, li elencher\u00f2:<\/p>\n\n<ul class=\"wp-block-list\"><li>Sophos Connect Client: ora \u00e8 possibile aggiungere anche gruppi e non pi\u00f9 solo singoli utenti.<\/li><li>SFOS ora supporta anche l&#8217;infrastruttura di Nutanix AHV e Nutanix Flow.<\/li><li>AWS: supporto per nuove istanze nel cloud AWS (C5, M5 e T3)<\/li><li>AWS: supporto per i modelli CloudFormation<\/li><li>AWS: supporto per le zone WAN virtuali su gateway personalizzati<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Gli amministratori che hanno gi\u00e0 aggiornato il loro XG Firewall alla versione 17.5 MR13 e MR14 aspettavano questo aggiornamento da molto tempo. Ma per tutti gli altri, la v18 MR3 porta anche 34 correzioni di bug e alcune nuove funzionalit\u00e0. Aggiornamento alla versione 18 Attualmente esistono ancora due versioni diverse di SFOS, che vengono aggiornate [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":36916,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[375],"tags":[],"class_list":["post-132106","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-non-categorizzato"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/posts\/132106","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/comments?post=132106"}],"version-history":[{"count":0,"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/posts\/132106\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/media\/36916"}],"wp:attachment":[{"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/media?parent=132106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/categories?post=132106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.avanet.com\/it\/wp-json\/wp\/v2\/tags?post=132106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}