https://cybertoolchain.io/tools/sophos-central-firewall New releases and features in Sophos Central Firewall, tracked by The Cyber Toolchain. en Thu, 29 Oct 2026 00:00:00 GMT https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Thu, 29 Oct 2026 00:00:00 GMT Sophos Central Firewall adds asynchronous API support for SD-WAN connection group management with background processing and a Force Delete option⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Manage SD-WAN connection groups asynchronously so that create, edit, and delete operations are processed in the background, with progress visible on the SD-WAN Connection and Task Queue pages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Use Force Delete to remove SD-WAN connection groups that cannot be deleted through the normal flow. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 13 Oct 2026 00:00:00 GMT Sophos Fusion gains instant config push for SFOS 23.0+ firewalls and a new AI Assistant for natural-language management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Firewall Assistant` tab in `Chat with an assistant` — an AI-powered assistant in Sophos Fusion for natural-language firewall management and troubleshooting on firewalls running SFOS 23.0 or later.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Sophos Fusion now pushes configuration changes immediately to firewalls running SFOS 23.0 or later, replacing the previous pull-every-minute polling model. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Sat, 12 Sep 2026 07:43:08 GMT Sophos Central Firewall raises maximum Firewall Reporting storage entitlement for term-licensed firewall models.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Increases the maximum Central Firewall Reporting storage entitlement for firewall models on term licences, retaining more reporting data before the storage limit is reached.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 08 Sep 2026 00:00:00 GMT Sophos Central Firewall 2026.38 raises maximum Central Firewall Reporting storage entitlement for term-licence firewall models. • Increases the maximum Central Firewall Reporting storage entitlement for firewall models using term licences, allowing more reporting data to be retained before the storage limit is reached. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Wed, 12 Aug 2026 09:48:12 GMT • Supports staging firewalls to validate firmware upgrades before rolling them out to the broader firewall fleet. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 11 Aug 2026 00:00:00 GMT Sophos Central Firewall Management gains recurring firmware upgrade schedules with weekly, monthly, and staged rollout options. • Adds recurring firmware upgrade schedules in Sophos Central Firewall Management, supporting weekly or monthly cadences and staging firewalls to validate upgrades before broader rollout. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Wed, 03 Dec 2025 00:00:00 GMT Sophos Central adds data plane services to ap-south-1 and ap-southeast-2 regions • Enables data plane services for firewall management in `ap-south-1` (Mumbai) and `ap-southeast-2` (Sydney) FSC regions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Wed, 08 Oct 2025 00:00:00 GMT Sophos MDR API now public; NDR logs include threat score. • `SNMP user interface` improved in Sophos Central Firewall management • New `public` access for the `Sophos MDR API` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Thu, 03 Jul 2025 00:00:00 GMT Adds automatic firewall backup scoring to Account Health Check and search to Licensing page • Adds search functionality to the `Firewall Reporting - Licensing` page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Thu, 05 Jun 2025 00:00:00 GMT Sophos Central Firewall v2025.23 adds scheduled CSV exports supporting up to 400,000 records. • Scheduled exports now support up to 400,000 records in CSV reports. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 15 Apr 2025 00:00:00 GMT Sophos Central Firewall 2025.14 adds MSP monthly license conversion for term-licensed firewalls. • You can now convert term licenses on your firewalls to MSP monthly licenses. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Fri, 28 Mar 2025 00:00:00 GMT Central Firewall Management now restricts unlicensed firewalls with UI graying out and config block. • `Unlicensed` firewalls are grayed out in the Sophos Central interface • Group configuration no longer applies to unlicensed firewalls Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 04 Mar 2025 00:00:00 GMT Sophos Central Firewall 2025.08 adds pagination to all master pages. • Adds paginated user interfaces across all master pages within Central Firewall Management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 21 Jan 2025 00:00:00 GMT Firewall Management now allows overlapping subscriptions for license renewals. • Allow overlapping subscriptions : You can now add a new subscription when you have an existing subscription that includes any of the same features. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Wed, 20 Nov 2024 00:00:00 GMT New UI navigation path to disable MDR/XDR log integration for Sophos Firewall. • Adds a UI path in Threat Analysis Center - Marketplace to control whether firewall logs (ATP, Sandbox, IDP, Anti-Virus, Anti-Spam) are sent to the MDR team. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 13 Aug 2024 00:00:00 GMT Sophos Central Firewall 2024.33 adds API for claimed licenses and flexible base license start dates. • Adds a new public API endpoint to retrieve the list of claimed firewall licenses • Allows setting the start date of firewall base licenses to an earlier date in the licensing manager Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 18 Jun 2024 00:00:00 GMT Adds Microsoft Entra ID (Azure AD) SSO authentication support in Sophos Central Firewall Management for firmware 19.5+ • Enables Microsoft Entra ID single sign-on configuration via Sophos Central for firewalls running version 19.5 or later. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Wed, 15 May 2024 00:00:00 GMT Sophos Central Firewall 2024.15 adds True Zero Touch for TPM XGS devices and local service ACL exceptions. • Introduces the 'True Zero Touch' process for XGS devices equipped with Trusted Platform Module (TPM) chips • Adds a local service ACL exception rule to allow access to admin services from a specified network or host Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Thu, 29 Feb 2024 00:00:00 GMT New Sophos Central Firewall 2024.06 features: skip full sync for firewall groups, reactivation of expired licenses, and pre-configuration of IP address pools for SD-WAN. • Adds the ability to skip full synchronization when adding a firewall to a firewall group in Sophos Central, allowing immediate configuration application with optional later sync • Enables reactivation of firewall evaluation licenses in Sophos Central and Partner that expired at least 90 days ago Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 06 Feb 2024 00:00:00 GMT Adds Security Posture Assessment (SPA) reports to Firewall Management > Report Generator • Security Posture Assessment (SPA) reports are now available in Sophos Central, under Firewall Management > Report Generator Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 16 Jan 2024 00:00:00 GMT New features in Sophos Central Firewall 2023.52 include ATP-to-X-Ops feed rename, alert severity/frequency configurator, and wildcard remote gateway for route-based VPNs. • Adds '*' wildcard support to the remote gateway field when creating a route-based VPN tunnel • Adds Alerts Configurator to set frequency of firewall alerts for a specific time period and configure their severity rating • Renames 'Advanced Threat Protection' to 'Sophos X-Ops Threat Feeds', which now comprises MDR Threat Feeds and Sophos X-Ops Threat Feeds Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Thu, 21 Sep 2023 00:00:00 GMT Sophos Central Firewall adds Alerts Configurator to adjust alert frequency and severity. • Adds an Alerts Configurator feature to configure the frequency of firewall alerts for a specific time period and their severity rating. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Sat, 05 Aug 2023 00:00:00 GMT Sophos Central Firewall 2023.31 restricts HTTPS on WAN interface by default. • Firewall Management Sophos Central will restrict the use of HTTPS service on the WAN interface. • Various improvements to the Central Partner dashboard functionality. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Thu, 08 Jun 2023 00:00:00 GMT Suspend grouping force sync and 8-hour dedup for disconnection alerts • Adds an 8-hour cooldown period for firewall disconnection alerts to prevent duplicate notifications Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 23 May 2023 00:00:00 GMT Automated firewall backup scheduling and enhanced HA node details in Sophos Central • Adds the ability to automatically add firewalls to a backup schedule via Firewall Management. • Displays additional high availability firewall details (node number, last status change) in Sophos Central and Central Partner for SFOS 19.5 MR3+ and SFOS 20.0+. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Tue, 17 Jan 2023 00:00:00 GMT Sophos Central Firewall 2023.01 adds SD-WAN profile creation and Fast Station Creation migration for partners • Enables creating SD-WAN profiles on firewalls within SD-WAN connection groups to route traffic based on gateway availability or performance • Adds `Migrate` option to move XFRM tunnel IPs to /30 subnet when the IP address is not in that range • Allows Sophos partners to migrate existing Central Partner firewall templates to new Fast Station Creation (FSC) stations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/cf_rn.html Thu, 29 Sep 2022 00:00:00 GMT Sophos Central adds firewall inventory view and bulk firmware upgrade scheduling on the Partner dashboard • Adds a firewall inventory section to the Central Partner dashboard for visibility into managed devices. • Enables scheduling firmware upgrades for multiple customers simultaneously from the Central Partner dashboard. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-central-firewall