u/Lucar_Toni

The latest release of Sophos Central introduces recurring firmware update schedules for Sophos Firewall.

This gives administrators the ability to keep all firewalls up to date while still maintaining full control over when updates are deployed.

A few important notes about this feature:

• SFOS will only install Maintenance Releases (MRs). Major version upgrades will not be installed automatically until you decide to move to the next major release.
• The feature also includes a staging option, allowing you to select a small group of firewalls to receive and test new firmware before rolling it out to the rest of your fleet.

Keep in mind that SFOS supports automatic firmware rollback in the event of an upgrade failure, including HA deployments. You can also manually downgrade at any time with a single click if an issue is encountered after the upgrade.

We released the Import/Export API for Sophos Central Partner / Customers:

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/151429/sophos-firewall-central-api-import-export-support-in-central-api

Used the time to explain, how it works and how it can be potentially be implemented to own workflows.

Keep in mind: This is an API, means, it is open for all kinds of customization.

Sophos released the 2026 State of Ransomware Report: Payments are dropping but encryption is climbing

No Gate, No Login required.

Direct Link to Report: https://www.sophos.com/en-us/content/state-of-ransomware

Blog Post (overview): https://www.sophos.com/en-us/blog/sophos-state-of-ransomware-2026

https://community.sophos.com/sophos-xg-firewall/f/discussions/151404/sophos-firewall-v22-0-mr2-feedback-and-experiences

This one is being asked by a lot of customers.
Take a look at those changes and how they can potentially help you to address some of your challenges within the endpoint and workspace web protection controls.

In this improvements are plenty of different improvements like API, GenAI category, shared profiles for multiple products, and plenty more.

New research from Sophos X-Ops on Al being leveraged by a threat actor in an attempt to evade EDR from Sophos, Crowdstrike, and Microsoft.

https://docs.sophos.com/nsg/sophos-firewall/config-studio/index.html

Noticed, i did not post about the recent changes for the Sophos Firewall Config Studio.

TL:DR: Config Studio, as a tool, is a free to use, no login, local data processed Tool for multiple use cases with Sophos Firewall.

In Version 2.5 we added the Migration Section to migrate from different vendors or Sophos UTM to SFOS and adapt your configuration before adding it to your firewall.

Try it! We would like to hear your thoughts around it!

And you can give us feedback directly via Email for adjustments, or fixes within the Tool.

Hey everyone! We’ve given r/sophos a bit of a refresh / updated the look and branding, cleaned up some old tags, and added a few new flairs.
If it fits, feel free to assign yourself a user flair (e.g., Sophos Customer, Home User, etc.).