Several significant updates have been implemented for Sophos ZTNA to enhance the ease of deployment and flexibility. These modifications are included in the updates to Sophos Central and do not necessitate any adjustments to your gateways or clients.
Support for Let’s Encrypt Certificates
Sophos ZTNA now provides backing for Let’s Encrypt certificates on your gateways.
You are likely already aware that Let’s Encrypt is a not-for-profit open certificate authority managed by the Internet Research Group (ISRG) that furnishes X.509 certificates for TLS encryption at no cost.
Let’s Encrypt offers free and uncomplicated certificates but entails the drawback of being valid for only 90 days. As a result, they necessitate more frequent maintenance compared to other certificates, which commonly have durations of 12, 24, or 36 months.

Fortunately, Sophos ZTNA helps resolve this issue by enabling automatic renewal 30 days before expiration.

You can make use of this feature with your existing gateways at any time, irrespective of your deployment mode (cloud or on-premises).
Inclusion of Additional Sophos Central Regions
Sophos ZTNA now extends support for central management beyond the conventional US and EU regions by introducing five new regions: Australia, Brazil, India, Japan, and Canada.

If you currently manage your Sophos Firewall and/or Endpoints in one of these regions, you can seamlessly incorporate Sophos ZTNA into your account.
Commence with ZTNA at No Cost
If you have not yet started using Sophos ZTNA, you can begin for free. There is a complimentary trial accessible via Sophos Central, and if you are an existing Sophos Firewall customer, you can obtain three complimentary one-year licenses and leverage the ZTNA gateway integrated into your firewall.
Refer to the Deployment Checklist for other aspects to consider when deploying ZTNA and the most recent online documentation.
