upgrade sophos xg 330

[titof]

I hope you’re doing well
I have a technical question about updating the company’s central FW firmware
The current version of SFOS is:

The latest available firmware displayed on the console are:

But I don’t think we can go from SFOS 19.0.1 MR-1-Build365 (current version) to SFOS 19.5.3 MR3-Build652 or SFOS 20.0.0 GA –Build222

There must first be an intermediate version… which is not visible in [Latest available firmware] If this is the case, how should it be downloaded and uploaded to the firewall? then upgrade.

This is the central firewall in HA, which is why I wanted to confirm certain things before launching the SFOS upgrade.

Thanks

[dbeato]

@titof ​ Check the upgrade matrix here

https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=19.5

The latest 19.5 upgrade is the 19.5 MR4, the only time the Sophos Firewall will block you from upgrading will be for routing issues. I would recommend only doing the MR Releases for now. 20 has a lot of changes.

https://support.sophos.com/support/s/article/KB-000044696?language=en_US

[dimitrischaralambous (dimitris15ch)]

Beware of your SSL VPN clients when upgrading to Version 20!

[titof]

@dbeato

Hi,

I think there is no “upgrade from​” to 19.5 for SFOS 19.0.1 MR-1-Build365

at least from 19.0 MR2

[titof]

@dimitrischaralambous ​
Hi, ok thank you
but now i just need to find the next version to upgrade from SFOS 19.0.1 MR-1-Build365 for my XG

[dbeato]

@Java72

dimitris15ch​
Hi, ok thank you
but now i just need to find the next version to upgrade from SFOS 19.0.1 MR-1-Build365 for my XG

You should be able to download it from your Sophos Portal.

[damontheis]

VPN problems? Do tell pretty please. I’ve clicked “do not upgrade yet” a few times now. I’m on 19.5.2

[titof]

i think we can upgrade SFOS 19.0.1 MR-1-Build365 to 19.0 MR3 Build 517 first of all

then wo do upgrade from 19.0 MR3 Build 517 to 19.5 MR4 Build 718

[dimitrischaralambous (dimitris15ch)]

Due to the VPN portal being introduced and by default using port 443, there were instances where we had to re-import configuration. But to be honest I did have firewalls that upgraded with no problems, I was using a different port for the User Portal (VPN Portal in Version 20) rather than 443.