The latest version of Sophos Firewall is now ready for installation
The latest version of Sophos Firewall introduces significant upgrades such as a new and engaging assistant for backing up and restoring configurations, improvements in Single Sign-On compatibility with Active Directory, and optimizations for web protection.
Assistance with Backup and Restoration
The new backup and restoration assistant simplifies the process of restoring firewall configurations onto a different appliance, offering flexible options for interface mapping.
This feature facilitates the transition from Sophos Firewall XG Series to the XGS Series, allows upgrades within the XGS Series models, and supports migration between hardware, virtual appliances, or software solutions.
It also allows for hassle-free migration of interfaces to higher-speed ports on the new or upgraded firewall.
Users can also export configuration templates from virtual appliances and apply them to various hardware or virtual deployments to streamline routine configurations.

Several key conditions must be met to fully utilize this new feature:
- For XG Series devices, backups should be created using v19.5 MR4, v20, or later versions.
- For XGS Series devices, backups should be created using this update: v20 MR2 (or newer).
For a more detailed look at the prerequisites and usage of this new assistant, check out the following video:
You can also verify the compatibility of the devices you wish to back up or restore and view the exact port configurations (including available Flexi Port modules) with a new tool accessible at https://docs.sophos.com/nsg/sophos-firewall/reference/backup_restore/port_mapping/en-us/

Other Improvements in Sophos Firewall v20 MR2
- Enhanced support for high-availability failover scenarios in Active Directory Single Sign-on
- Extended support in Active Directory Single Sign-on for performing the Kerberos/NTLM handshake over HTTP or HTTPS for a seamless SSO experience with HSTS enforcement
- Improved Web Protection performance by reducing system load during the enforcement of various restrictions and login domains
- Customizable ciphers in Web Protection provide flexibility to achieve optimal network balance between compatibility, security, and compliance
Procedure for Obtaining the Firmware and Documentation
Sophos Firewall OS v20 MR2 is a no-cost upgrade for all licensed users and is recommended for installation on all compatible devices to ensure the latest security, performance, and reliability updates.
Updates will be distributed following our standard release process. You can manually download SFOS v20 MR2 from Sophos Central and update at your convenience or wait for the automatic rollout to connected devices over the next few weeks. Notifications will inform you when the update is ready, allowing you to schedule the installation.
Sophos Firewall OS v20 MR2 supports upgrades from all previous v20, v19.5, and v19.0 versions. Refer to the Upgrade Information section in the release notes for more information.
Complete product documentation is available online and within the product.

