Version 3.2.1.0 Release Notes

July 28, 2009

This release offers the ability to configure Transport Layer Security (TLS) encryption for incoming domains, and adds an option to query Directory Services for the purpose of SMTP authentication. A number of issues have also been resolved.

When this update is installed, the Email Appliance will reboot.

You should also familiarize yourself with the known issues listed below. Improper configuration of certain options may cause unexpected behavior.

Before you begin installing and configuring the Email Appliance for the first time, you should also review the configuration directions listed below.

Internet Explorer (versions 6 and 7) and Mozilla Firefox (versions 2 and 3) are the only supported browsers for this product release. However, the Email Appliance has been optimized for current-generation browsers, such as Internet Explorer 7 and Firefox 3. If you are using an older browser such as Internet Explorer 6 and experience performance issues, consider upgrading to a newer version of Internet Explorer, or to a recent version of Firefox.

Updates and Enhancements in the Sophos Email Appliance3.2.1.0 Release

• You can now configure TLS encryption for incoming domains. If TLS encryption is turned on, the appliance will attempt, but not enforce, encryption for both incoming and outgoing domains. Alternatively, you can require encryption or, instead, require encryption only when a valid certificate is supplied (WKI40510).
• As part of TLS improvements, the Email Appliance no longer supports SSL v2, a form of encryption used by older web browsers (WKI40733).
• An SMTP authentication query can be configured on the Directory Services page (Configuration > System). Click Queries to access this option (WKI41144).

Issues Resolved in the Sophos Email Appliance3.2.1.0 Release

• Empty quarantine directories are now removed, resulting in improved performance (DEF40511).
• Email messages in the Thai language are no longer corrupted when the Email Appliance adds a banner to a message (DEF40906).
• Active Directory groups that contain accents or umlauts can now be added to the list of User Groups of the appliance (DEF21777).
• A new service has been created to extract information about email from the database. Log searches are now completed with greater speed and stability (DEF38801).