Limited Release
Version 3.9.1.0 was released to an initial group of customers on October 21st, 2015. This
release will be made available to all customers over the next few weeks.
October 21st, 2015.
This release provides several improvements, and resolves a number of issues.
You should also familiarize yourself with the known issues, since improper
configuration of certain options may cause unexpected behavior.
Updates and Enhancements in the Sophos Email Appliance 3.9.1.0 Release.
- The new CXmail feature provides better data, improving SophosLabs' ability to manage
threats.
- The Sophos
Email Appliancenow has SHA-2 available for its
self-signed certificates (SEA-109).
Note: To use SHA-2 for self-signed certificates on
existing appliances, you will need to change the appliance hostname to a temporary name,
then back to the original hostname. This will regenerate the self-signed certificate
using SHA-2.
- CBC and RC4 ciphers are now disabled by default (SEA-176,SEA-178).
Note: To re-enable
these ciphers, you can select the Support Legacy SSL Connection
checkbox on the page. In addition to enabling CBC and RC4 ciphers, the Support
Legacy SSL Connection checkbox will continue to enable SSLv3. As these
protocols are not considered secure, this is not recommended unless
necessary.
- Delay queue status is now displayed on the Dashboard (SEA-210).
- The delay queue is now on by default for new appliances (SEA-216).
Issues Resolved in the Sophos
Email Appliance3.9.1.0
Release
- Searching mail logs without using a sender or recipient for an Email
Appliance with a very large volume of mail now works correctly (SEA-35).
- Deferred messages now contain all of the fields needed for tracking the messages
correctly (SEA-98).
- SPX-encrypted messages now contain the email header date field in the encrypted PDF
(SEA-195).
- An issue has been resolved that could prevent some emails from being listed in Delay
Queue search results (SEA-220).