Sophos Firewall v20: VPN Enhancements

We give an overview of the VPN enhancements we've made to Sophos Firewall v20.
For more information about the Sophos Firewall v20 Early Access Program:
community.soph...
Buy Sophos Firewall: soph.so/BuyFir...
Join our Sophos Community at community.soph...
For more helpful videos, go to techvids.sopho...

[@MassimilianoScarabotti-mg3bn]

Upgrading from v19.5.4 to v20, will existing SSL VPN user connections continue to work?

[@canadianwildlifeservice8883]

Please add support for the 4096 bit DH key exchange. Sophos firewall currently supports only up to 2048 bit DH key exchange, which will be cracked before the year 2030 according to security experts :)

[@SophosSupport]

Hello, thank you for your feedback, we recommend reaching out to your Sophos Partner/Support to input this as a Feedback/Feature request into your Account

[@Ramsas154]

Hi guys, is there any @ when Sophos will finally support AzureAD auth (with it's MFA) for IPSEC or SSL VPN Sophos connect (or any other way). Currently we are using on-prem radius solution, but the missing "visual thing" to look up a phone for MFA prompt is killing our users :/ Also sometimes hard to troubleshoot.

[@mohammadabdullah1302]

Still no work done on MAC binding in Remote Access VPN 😐

[@SophosSupport]

Hello, MAC binding is supported in the Firewall. However, for Remote Access VPN, the Firewall can't bind remote access VPN users with MAC addresses because the Firewall won't see the device's Mac address.

[@mohammadabdullah1302]

@@SophosSupport Exactly that's the point. Other vendors are providing this feature with remote access VPN as well