- This release includes platform updates, software component upgrades, security updates and bug fixes to improve the stability and reliability of the ZTNA Gateway.
- Upgrading to this build is mandatory.
These are the release notes for the ZTNA Gateway.
The features mentioned in these release notes are only available if you have the appropriate license.
View the product documentation at ZTNA documentation.
IMPORTANT: Security update
We released an updated version of ZTNA Gateway 2.3 to address CVE-2026-111943, related to the compromise of eMudhra intermediate CA private keys.
If you use a customer-managed ZTNA Gateway on VMware ESXi or Hyper-V, upgrade to the latest ZTNA Gateway 2.3 update, even if you're already running an earlier ZTNA Gateway 2.3 build. The update isn't applied automatically.
If you use Sophos Firewall as your ZTNA Gateway, you don't need to take any additional action because the required security update is being addressed by a hotfix for the applicable Sophos Firewall versions.
IMPORTANT:
We're releasing ZTNA 2.2.1 and ZTNA 2.3 at the same time. You must upgrade to ZTNA 2.2.1 first, and then upgrade immediately to ZTNA 2.3.
| Issue ID | Description |
|---|---|
| NZT-9984 | Resolved an issue that caused false diagnostic warnings about unhealthy cluster pods on the ZTNA gateway. User traffic and resource access weren't affected. |
| Issue ID | Description |
|---|---|
| NZT-8009 | Resolved an issue that caused intermittent connectivity issues with agent-based resources through an on-premises gateway. |
| NZT-6795 | Resolved an issue that caused on-premises gateways to get stuck in the “Updating” state after image update. |
| NZT-7736 | Resolved an issue that caused incorrect diagnostic error messages about unhealthy cluster pods, even though resource access functioned correctly. |
| NZT-8500 | Resolved a race condition that caused Kubernetes pods to fail. |
For more details, see ZTNA Settings.
| Issue ID | Description |
|---|---|
| NZT-7152 | Resolved an issue where new ZTNA agent registrations were causing existing agents to lose connectivity. |
| NZT-6745 | Resolved an issue that prevented users from testing the connection to on-premises AD when the username was entered in a particular format. |
IMPORTANT:
We're releasing ZTNA 2.1 and 2.1.1 at the same time, so you must upgrade to ZTNA 2.1 and then ZTNA 2.1.1 immediately.
This release contains various bug fixes and security and vulnerability patches.
We've integrated Sophos ZTNA and Sophos Firewall. With the integrated ZTNA gateway in Sophos Firewall, you don't need to install additional applications on your network to support ZTNA secure access.
There are no resolved issues included in this version.
See ZTNA Known Issues list for a full list of known issues with ZTNA.
You can find technical support for Sophos products in any of these ways:
Copyright © 2023 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.