Firmware

Use Firmware page to check for the latest available firmware for managed devices. To check for the availability of the latest firmware, go to System Management > Device Settings > Firmware.

Manual firewall firmware upload
Here you can configure firmware updates for XG Firewalls that are seperated from the internet by an airgap. Both the XG Firewall and SFM must be on the same local network to allow communication. You must download updates from https://airgap.u2d.sophos.com/SFM/index.html
Appliances that are airgapped will still need to have airgap turned on via the CLI as described in the CLI guide found here https://docs.sophos.com/nsg/sophos-firewall/v17.0.5/ddF/SF%20OS%20Command%20Reference%20Guide.pdf. Additionally you can configure XG Firewall to check for firmware updates from SFM instead of checking the update service under: Administration > Central Management > Enable update management
For further information on managing airgaped appliances please refer to the following KB articles;

How Air Gap and manual pattern updates work

Automate the pattern update in Airgap environment

Choose File
Click to select the previously downloaded firmware file that is to be applied to airgapped appliances
Apply
Click to apply uddate settings for airgapped appliances
Check for Latest Firmware
Click to check availability of latest firmware.
Model
Device Model number.
Applicable devices
Click ‘List device’ to view list of devices which can be upgraded with available firmware.
Applicable Version
Applicable firmware version.
Size
Size of downloadable firmware image in MB.
Type
Displays the type of firmware.
Available Odtions:Beta GA
Action
Click to apply downloaded firmware on the selected device(s).

Apply Firmware

Schedule
Click to schedule firmware upgrade. You can upgrade the selected device(s) with downloaded firmware immediately or you can choose to upgrade it later.
Device
Select the device to be upgraded with downloaded firmware.