Video: Announcing Sophos Firewall v22 | Duration: 2624s | Summary: Announcing Sophos Firewall v22 | Chapters: Welcome and Introduction (9.12s), Current Security Challenges (238.82s), Secure By Design (586.53s), Firewall Health Check (1317.44s), Feature Updates Q&A (2222.26s), Version Upgrade Considerations (2385.33s), Backup Functionality Discussion (2490.885s), Conclusion and Thanks (2567.755s)
Transcript for "Announcing Sophos Firewall v22":
Hi, everybody, and thanks for joining us. We're just gonna give it a moment for a few more people to join. And, you know, as soon as everybody's joined, then we'll get started with the session. So please do bear with us. I can see the numbers are still going up, so we'll just give it another moment. Whilst you're all waiting, I can update you on a few of the housekeeping things. There is a q and a panel that you'll see where you can ask questions throughout the session, and we'll do our best to answer those as we go through. Obviously, if you have any other issues, you can also use the chat. There's also somebody monitoring for any of that. You will all receive a message after this session where you'll get the recording of the session. And if you've got any colleagues who weren't able to join today, they can still register and, watch the recorded version at any time, to suit their own time schedule. So I think with that, we're gonna start getting, going through the content. I really wanna thank you all for joining today and thank you to any of you who were able to join the EAP for Sophos Firewall v '20 two. As I'm sure you're aware, this is a really key release for us. And throughout this presentation, I can promise you we are not going to take you through every single feature that we've introduced. We've got some great blog posts and other, materials like a what's new PDF that can talk you through all of that. But what we do want to do is to pick up on some of those key features and how you can take advantage of those capabilities to help your customers and to enhance their protection. We have a team of people to support you today. My name is Barbara Hudson from a global product marketing team. I'm joined by my colleague, Chris, who will be doing part of the presenting today. And another colleague, Path, I'm not sure if he's been able to join the call so far. He is actually in a time zone that would make this probably bedtime for a lot of people, so we'll see if Path is able to join or not. But rest assured that we're going to try and get through as many of your questions as we can. And anything that we don't get to, we'll make sure that we send you the answers afterwards. If we take a look at the agenda, first of all, what we want to do is talk to you about some of the challenges that you and your customers are facing right now that really frame this launch but also are probably defining your day to day work right now. And you'll see what I mean when I get to those. There are gonna be things that you are gonna all be familiar with. Well, then I'll hand over to Chris and he'll take a look through Sophos firewall v 22. And one of the key things that we want to highlight are the secure by design capabilities that we've introduced in this release because they are really key, particularly based upon the current landscape that we are in. But there are also many features that improve the value of the product and that improve the management and the day to day use of the product. And we'll talk to you a little bit about those as well. And then we'll look at how this release improves your competitive positioning. And at the end, hoping that you will put in a lot of questions, we will go through the the most important questions and you'll still have time to ask a few more if you want to. So, please do, let us know if there's anything that you want to know about this release or the firewall in general. So if I dive in into the current challenges that many of you are facing right now and this really impacts, I think, all of us. There is nobody that will be completely unaware of the way that the threat scan landscape is at the moment. Firewalls, VPNs, and network infrastructure are under the under attack. And if you haven't had the misfortune to have been impacted by that yourself, we hope you haven't, you would have certainly seen the news headlines. And there has been such a lot of, you know, vulnerabilities that have been exploited by attackers, ransomware gangs that are going after weaknesses, misconfigurations, any other holes in network in network infrastructure. And based upon our own threat data, we've really seen that, you know, things like VPN are one of the main entry points when it comes to ransomware. And particular vendors, you know, are at the height of of this. I, you know, I think it's I'm not throwing anybody on the the bus, but this it surely hasn't gone unnoticed that, obviously, Fortinet has seen a lot of different vulnerabilities more recently. There was the very, very prominent, SonicWall cloud backup breach that I think, you know, was right across the news. And it's not as if Sophos hasn't had similar situations in the past. Back in 2018, we were under attack. In fact, it was the cyber roam infrastructure that was under attack. And if you remember, some of you may have seen those blog posts and the various things where we reserved refer to Pacific Rim. And that is something for us that at the time when we were under attack and it was a very well coordinated attack that went on for a very long time, we saw that as a call to action. A call to action for us that we need to put all measures in place to make sure that our firewall is hardened against attack. And it really has been a learning for us and for the industry. When something like that happens, it doesn't impact one vendor. Many other vendors can be involved. Law enforcement was involved in this particular case. And so we really have an opportunity here to highlight how you can help your customers. I'm sure every time they see a headline, they're gonna be asking themselves, well, does that impact me? What about my firewall? How secure are my cloud backups? And that's exactly what we want to help you answer with this presentation. The next thing is the economic climate. And I think that there is nobody that isn't sort of thinking twice before they spend a dollar or, or whatever other currency you might be using. So I think that, you know, for all of us, we're looking at investments that we make and ensuring that we're really investing the money well and that we're getting a good return on that money. And that may mean that some of your customers have budgets that are stretched to the limit. Now what that can also mean is that people start pushing investments. And I think that, you know, speaking to various partners recently, this is really so been so key that people, you know do I really need to refresh my firewall now or can I use it for another couple of years? Those kind of things. And, of course, if people do push a refresh and the product is still supported, that's fine. But if the budget situation leads to people using things that are unsupported or end of life, that is not fine because that feeds into that difficult threat landscape that I mentioned before. There is certainly also another thing that very linked to this and that is a lack of skilled staff. And this can take two forms. It could be that you can't hire the staff that you need or you and your customers, but it can also be that people can't afford to pay the staff that have the skills that they need to be able to keep their network secure. And so many customers, of course, will be relying more and more on you as the partner, as that trusted adviser. But you're also trying to do more with less. When you don't have the people, you know, we all get by somehow even if we don't have all the colleagues that we'd love to have. And so this is really, one of the things that can cause some risks because tasks will fall under the radar. You know, every person just can do so much. And so if that starts to impact security, then it's very difficult. And if there are any ways in which we can make life a little bit easier for you and your customers, then, of course, we will try to do that. So what you really need and your customers need is a firewall that is secure by design, that really is built to prevent those threats that are coming through, that make sure that you have ways to keep it secure. It needs to offer excellent value for money and that your customers know that their hard earned cash that they're investing is really giving them a good return. And it also needs to ease the day to day management. And if there's any automation that can be built in there to help the customer so that they don't have to be on top of everything just to make life a little bit easier, then, of course, that is definitely going to be a plus as well. And as you'll see throughout this presentation, Sophos firewall v 22 and that's all of course, that and all the other releases that came before is all of those things and much more. So over to Chris now to take us through some of the reasons why. Thanks, Barbara. And, yeah, let's have a deeper dive into Sophos firewall 22. So there are three key elements or themes, if you like, to this release. Secure by Design or hardening and strengthening the security of the firewall itself has really been a key pillar of our product strategy for a few years now. But with v 22, the team has taken Secure by Design to a whole new level. There's new features to help ensure the firewall is actually configured optimally and securely. There's a new next gen architecture for added security and scalability, expanded monitoring of all of our customer firewalls by our security team for signs of an attack, a new anti malware engine that introduces AI detections, and secured updates using SSL encryption and certificate pinning to ensure the authenticity of those firmware updates. Then networking and scalability has also been enhanced for everyone, but particularly large distributed networks such as universities and education networks or large corporate networks will see the most benefits with enhanced monitoring and logging. And then as with every Sophos firewall release, the team focuses on your top feedback and continuously looks for ways to optimize day to day management. So you'll find many great performance enhancements in the management console, say, new SNMP monitoring of the hardware, enhancements to authentication such as MFA support for the web application firewall, and two fifty six and five twelve bit support for one time passwords. So all of this just adds up to tremendous added value for customers. There's something or really many things for everyone in this great release. Now I'm not gonna go through every, point on this slide. There is a ton of great new features in this release. And, of course, we don't have time to go through everything in detail today, but you can take a screenshot of this, list if you want. Or as Barbara mentioned, we have lots of other resources that go through each of these features in detail. But I I do wanna touch on a couple of things. We will and we will do a deeper dive into a few of these as well. One of those is the firewall health check feature. The else the other is the new extreme architecture, the sort of next gen version of the extreme architecture, if you like. And we'll also cover some of the other secure by design enhancements. Now I mentioned network scalability, and that includes logging and API enhancements as well as flow monitoring. And then there are management experience and quality of life enhancements I talked about earlier, but those particularly affect UI performance. So you'll find the UI is much snappier now, which was, one of the top pieces of feedback we received in the past. You've now got the ability to do hardware monitoring of the device via SNMP, and there's instant alerting of web policy violations now, which is particularly helpful for education institutions or any other organization that needs to be aware if there's a web policy violation. So for any customers that are going to be migrating from our legacy SG UTM platform to to Sophos firewall as the end of life of that platform is quickly coming, quickly coming up. They also have a few features in this release that are gonna make that migration easier. So, it supports MFA or multifactor authentication on the web application firewall for them. There is, as I mentioned, two fifty six and twelve bit support, five twelve bit support for one time passwords, and audit trail logs now comply with the latest NIST requirements, which is great. You can see exactly what's been changed on the firewall at any time. And so, hopefully, looking at this list, you'll agree with me. There is a ton of added value really for all types of different customers with this new release. So let's take a deeper dive into the secure by design concepts and which is all about making the product itself hardened and more secure and a more difficult target for hackers and attackers out there. So since we came under attack by nation state hackers a few years ago, we have invested heavily in the secure by design principles or making the firewall the toughest attack, target for any attack we could we can. And so a few things that we've added previously are worth revisiting because they they sort of, some of them are quite unique and innovative and provide a competitive differentiator. And one of those is the automatic patching. Now as we discussed, a common attack vector these days is hackers targeting unpatched vulnerabilities in network infrastructure devices like firewalls. And the fact that there's a lot of these devices out there that have unpatched vulnerabilities is a huge problem. But it's understandable. Right? Because not every admin can apply every patch that comes down immediately. So it takes time to schedule some downtime to apply a firmware update that has a patch in it and and and reboot the device. So we thought there has to be a better way. And that's why we have these automated patching solution. So what this means is we've really narrowed the window for equipping Sophos firewalls with the latest security patches. Because what happens is we can issue a security patch as soon as it's ready in real time, and have it pushed out to every firewall device out there without the customer or you having to schedule downtime to do a regular firmware update. So this is extremely helpful between regular firmware releases like where, you know, v 22, between v 22 and the next major release. We can issue these security hot fixes whenever we need to and make sure your firewall is patched or your customer's firewall is patched immediately. So that's huge. Next, as Barbara pointed out, one of our, competitors in the field has been attacked under the, with their backups have been compromised. And we just wanna make sure that you're aware that our backups are doubly protected, if you like. It's like the equivalent of putting the backup data in a vault and then locking the front door on top of that. It may be, particularly good for you to be able to mention this when asked about it because of the recent sonic wallings incident, not to mention any names. But it is, a very helpful, response that you can have to say, look. Your backups are not gonna be compromised. They're doubly protected and encrypted in Sophos cloud. And Sophos is also unique in that we take a vested interest in your customer security and actually monitor our firewalls for any signs that they're being attacked. And that capability just got a huge upgrade with b 22 as I'll mention in a moment, but no other vendor is offering this kind of monitoring capability for the customer's firewalls. And it's perhaps important as a result to point out that we are not monitoring what you're doing or the customer is doing or what their traffic or data is. We are simply looking for any signs that the device itself is being attacked or tampered with. It's sort of think of it like the check engine light on a vehicle. We're not monitoring who's going where or what they're doing with their car or their truck. We are just monitoring the health of the engine. And that's exactly what we're doing here. We're monitoring the firewall to see if there's been any signs of tampering. Now what have we added in this release is quite remarkable as well. So with v 22, we've enhanced that monitoring I just talked about by adding a Sophos Linux XDR sensor onto the firewall that enables us to receive better real time telemetry and detections of things like file tampering. So if a customer's device is being attacked or compromised, we will know about it and be able to respond and help remediate it quickly. So we'll get in touch with you, we'll get in touch with the customer, and we'll we'll make sure, we get this resolved quickly and clean it up. Now we've also deeply hardened the platform itself, starting with a new hardened kernel and building a next gen extreme architecture on top of that with a brand new control plane that isolates and containerizes processes on the firewall for added security, while also expanding the capabilities of the architecture for future enhancements. I'll get into a bit of that in a in a moment. Now one of the great new features in Sophos firewall v 22 is this new health check capability, and we're gonna cover that as well. It analyzes dozens of configuration settings in the firewall and immediately identifies anything that may be high risk or misconfigured, allowing you and your customers to quickly and easily address it. But as I mentioned, Sophos firewall introduces a new extreme architecture as part of e twenty two. Now you may recall we first introduced this extreme architecture back in version 18, enabling XGS series appliances to take full advantage of the added processing power and capabilities they provided. Since then, we've evolved this architecture considerably. It's been constantly scaling and improving performance and adapting to bring additional protection to customer networks. And this is all thanks to the fact that we have this programmable architecture that's not dependent on custom silicon ASICs that need to be replaced. In fact, it works equally well on general purpose CPUs, virtual CPUs, and, of course, our XGS series models that have dedicated flow processors. Now as I mentioned, Sophos firewall v 22 introduces the next generation of this extreme architecture, which has an all new control plane that's been rearchitected for maximum security and scalability that'll take us into the future. The new control plane enables modularization and isolation and containerization of services like, say, IPS, for example, to run like an app on the firewall platform, and a enabling us to easily add new containerized services to the firewall down the road. It also enables complete separation of privileges for added security. It will enable us to introduce new ultra scalable features in the future, such as end node high availability clusters or higher performance group management and automation features, a full restful API, for example, and much more down the road. But the net result of all this is an ultra secure, scalable, and streamlined architecture that's really built for the future. Now this is a bit of a rhetorical question, but how much insights do your customers have into potential weak spots on their firewall? Of course, the answer is never enough. Right? And as we've discussed earlier, attackers are exploiting weaknesses that they can find, whether it's a vulnerability or just a misconfiguration. So a strong security posture really depends on ensuring the firewall is optimally configured. But we know that with everyone trying to do more with less, there's a serious risk here that something might have been overlooked. But Sophos firewall version 22 is gonna change all this with a significant new feature. It's the, firewall health check. It makes it much easier to evaluate and address any misconfiguration of the firewall. It evaluates, as I said, dozens of different configuration settings across all areas of the firewall and compares them with CIS benchmarks and other best practices to see if there's anything that could be improved or is high risk. And it makes this super easy by highlighting all the high risk settings and providing recommendations with a quick drill down so that you can get at what needs to be fixed quickly and easily. As you can see, there's a new widget that will be on the control center. It summarizes the results of the latest analysis, and you can then use that to click on it, drill down to the full report you can see here, and then, go through the list and see what is high risk, what needs to be dealt with, and then drill down into actually what capability needs to be fixed right from there. Now you might be wondering about who is this CIS organization. Well, they are the Center for Internet Security, CIS. They are a nonprofit community of IT professionals that is really just dedicated to evolving standards and best practices for securing IT systems and data. So you can actually go to their website and find our page there. We have a page on the CIS website, and you can actually download, the benchmark PDF or Sophos firewall from their website. And that will actually give you a deeper insights into why these configuration changes or settings that we recommend are considered a best practice. Alright. So that wraps up the secure by design capabilities. How does this help you? Well, the new health check feature is actually very cool because it enables you to uncover security gaps and demonstrate added value to your customers at the same time. It really provides you a great opportunity as your sort of customer's trusted security advisor to either help ensure their firewalls are optimally secure, or if you're managing it for them, ensure they haven't you haven't overlooked anything important. Now you could even use this new capability as a reason to get in touch with your customers and review their security posture together. You could use this as the basis for a security optimization professional services offering, if you want. It also helps you strengthen your competitive positioning in a time where Secure by Design is, you know, front and center. It's a real critical importance these days, and many customers are taking note of how important it is with all these firewalls everywhere being under attack. So while many Secure by Design elements are architectural or back end or not otherwise visible, this is, you know, the secure, or the firewall health check is an actual great visible highly visible tool that really enables you to showcase to your customers and to your prospects the commitment we have to secure by design in today's threat landscape. Alright. So that's all about security. We also, as I mentioned, try to make your quality of life improvements, every or your day to day management improved every day. So let's have a look at some of those enhancements as well. Now we continue to add value to the product with these new features and just making life simpler. For example, we also added a ton of great new features that add tremendous value to the product recently, such as DNS protection or NDR or active threat response. Now all of these features, including what you're hearing today, come to customers at no extra cost, which is building tremendous added value for them. And we we are continuing that trend with all the great secure by design capabilities we've added. And now you and customers can take advantage of some of the new management capabilities as well, such as monitoring. You can do monitoring with s flow on the interfaces. You can do SNMP monitoring of the hardware now. As I mentioned earlier, education institutions can get instant alerts on web policy violations that allows them to, deal with troubled kids if they need to or just be aware quickly if there's someone trying to violate web policy. And all of this stuff comes without having to upgrade the hardware of your firewall. It's all added capability that adds extra value and gets more mileage out of your existing firewall investment. So this release, like most, really allows you to demonstrate clearly how much added value customers are getting for their investment. Now there's plenty of direct and indirect benefits for you as well. Of course, you can use the SNMP monitoring to identify potential issues on any firewall that you manage or is in your customer install base. You can help improve customer compliance with the enhanced audit trail logs and real time web alerts or the health check features we talked about. You can ensure customers or you can assure customers that their investment is secure. And the foundation we've laid for future enhancements with the new architecture will enable them to reap even more benefits in terms of added value and ROI going forward. And you can demonstrate the tangible improvements with the faster user interface and the improved visibility they get. And if you're an MSP, you can take advantage of the enhanced API controls in this release for stronger API governance and multitenant management. So there's lots of new capabilities in here that are gonna make your business stronger as well. So with that, I'm gonna hand it over to Barbara to talk about the competitive aspects. Thank you, Chris. And thanks everybody for typing in a few questions. So we'll try to get to some of those questions, a little bit later. And, if you're typing your questions in the chat, could you please put them in the q and a so that we don't miss anything? So let's talk a little bit about, how this strengthens your competitive position. And, obviously, you're looking at many different, scenarios where there are different sales scenarios that, you know, you're talking to brand new customers that could be prospects that are maybe not using Sophos firewall today. You are talking to existing customers that you wanna show the value of their product there. And you're also talking maybe to some customers that are using something else like Sophos UTM or you need to talk to them about the upgrade opportunity. Now if we start on the left with the new customers, this gives you a really great opportunity to talk to them about some of the things that Sophos offers that other vendors will charge for. And as you know, there are quite a lot of those things. You just need to think of things like the central management capabilities that we offer. But, of course, things like a health check that we've now added in here is a great feature that you can demonstrate to them how we approach secure by design. And it's really a chance to compare and contrast with other vendors. If you think about, for example, asking a prospect, you know, how does your vendor approach secure by design? How are they fulfilling those secure by design goals? And in many cases, they won't actually be able to tell you because not every vendor is quite as transparent as we are about what we're doing with secure by design. And that is something for us that, you know, I say we've seen this as a call to action for us, and we're doing this, with every feature that we bring. We tell you what it does, and we explain that to you. Of course, we have a competitive upgrade promo that is available to you, our competitive takeout promo, and that's a great opportunity. So if you have new Sophos firewall customers, you can give them 50% off at NextGen's appliance plus extreme protection. If you have brand new Sophos customers, so they don't have any other Sophos products so far, you can even offer them one year of Sophos endpoint for free for 25 user licenses and three server licenses. Now this is a great opportunity for you to not only win a new firewall customer, but also to lay the foundation for future cross and upsell. Because if that customer gets to experience synchronized security, for example, by using endpoint in one department where they're just sort of testing it out. Then maybe later, they will say, well, I wanna upgrade from Sophos endpoint to maybe Sophos XDR, Sophos MDR. So really sort of getting you a foot in the door and allowing you to expand your footprint with those customers as well. When it comes to existing customers, of course, everything that we add where you can demonstrate that we're adding value to their existing investment is is great. And I know that sometimes, you know, when you're working with customers, looking for another reason to call them, just a touch point that you can use, the health check's a great opportunity to do that, to check-in, see how they're doing, see if they'd be interested in doing some kind of as assessment. You know, let's let's just look where you are. Let's look if there's anything that we need to change, update, you know, any weaknesses that have been open. And that's a great opportunity to do that. So, certainly, a way to encourage best practices for those existing customers, but also a way to ensure that they're using the functionality that they have available to them because not everybody reaps the full benefit of their firewall investment. And we know that there are many features that people probably could be using, but they just haven't investigated them yet. So this is a good chance to investigate that based upon those health check things where it might sometimes say that this feature x is not turned on. So you can explain to your customer exactly what that would mean if they did turn that on. And, of course, you're gonna have those customers that potentially need to upgrade. Now whether these are remaining x g customers, yes, we have a few of those, people that had a license that was valid way way past the end of life date, and they couldn't upgrade to v 21. They can't upgrade to v 22. So to get all of these features, they need to upgrade, and we've given you some more reasons to convince those customers to upgrade. But, of course, we've got our Sophos UTM customer base, and we know that that end of life milestone is coming up at the June next year. And so for those customers, we know that some of those customers can be can be tech savvy. They have very specific requests. And this release, once again, adds further requested features for the UTM customer base. But it also gives a you a really strong technical story, a functional story of why they should upgrade to Sophos firewall. And I think they'll appreciate that. And I do wanna mention again, we have a promo for that. Of course, we have a promo for everything. But in this particular case, we've got what I call the all in one promo. And it sort of, you know, leaves no wishes open. So, again, the customers can get 50% off XGS and extreme protection. Here also, we have a handful of endpoint licenses built in with that they can get for free for a year. But in this one, we've also added in a 60% discount on central email advanced. You know, the central email advanced is way superior to email on the firewall. And so that's another opportunity for you to, of course, cross sell them to email. We also give them three years of web server protection absolutely free using this promo. So every single discount that they could possibly have is included in the promo. And as if that wasn't enough, we've actually, previously, we just had a three month license overlap that they could get so they would get extra term on their SG. Just this week on the fourth, this week, last week. But just last week on the December 4, we actually extended it. So now people can get up to six months of license overlap. So extra term on their s g when they refresh using one of our promos, and they have the possibility to use that. So, effectively, you can save your customer the cost of a further renewal, those that are thinking of doing that final renewal before the December because that's the final renewal date. And so it's another thing that you could reach out to those customers, another incentive for them. So just to summarize, I think we've shown quite well that this, you know, this release is really, really strong and gives you a lot to talk about with your customers from those enhancements, the compelling new features, and also that foundation that we've laid for to take our firewall into the future. Secure by Design is a story that really resonates with customers and just becoming stronger and stronger. And if you're looking for additional earnings potential, then maybe the health check is something that can offer you that. Make sure you're getting your customers to upgrade. Make sure they're aware of all the new great new features that we have because we're really committed to providing a firewall that addresses those challenges that I mentioned at the beginning, that makes sure that it's as secure as possible, that's hardened against attack, to make sure that it offers customers great value and they know that they've made a good investment, but also that it helps with their day to day management. And on that, Chris, I hope whilst I've been talking, you've had a little chance to look into some of the questions that we've got. Is there anything that you'd like to highlight on the, the questions that have come through? Yes. Yes. There has been a few questions. Thanks, everyone. There are several, like, road map related questions we we can't get into because neither Barbara or I can speak to the road map. But there are some good questions about the content we, covered today, so let me get to those. So one question was regarding the health check feature. Will you be extending its functionality to allow something like configuration rollback or audit trail where we can see recent changes, being made and revert them. And so I just wanted to point out that, of course, another great feature in v 22 is full audit trail logging that allows you to quickly identify changes that have been made. So if someone does use the health check feature to make a change and you want to roll that back, you can quickly and easily find out what it was using the new audit trail logging. So that's already in there in effect. Someone else asked, what about a real time log viewer in Sophos Firewall similar to what we have in SG UTM? And I don't know if you're aware, but Sophos Firewall's log, solution overwinter a huge, overhaul is probably the best word, a few releases back. And it now has the equivalent of real time log viewing just like the SGUTM platform. So check it out and and see if it, meets your needs. Someone else was asking about the web filter violation alerts, the instant alerting in version 22. And and they were saying, so if someone gets an alert, does that mean the firewall was not able to block it? And no. That's not how it works. What it is doing is alerting you of students or users attempting to access sites that are being blocked. So you can see if anyone's trying to access sites they shouldn't effectively, and you can get those alerts. Someone else asked, will health check be available in Sophos Central? And that's a very good question. Of course, that's our plan, and it will be added to Sophos Central in an upcoming release so that you can do all your health check assessments from Sophos Central. But I think, Chris, And then was asking, would it be something that could be used stand alone if somebody had a different, device? Of course, it is tied to our product, isn't it? It's you do have to have a softwares firewall to be able to use it. It's not something that you can use if you're. using Fortinet. Yeah. Yeah. True. That's very true. And then someone asked if there's any considerations upgrading from version 21 to 22, and that's a very good question. If you read the, Sophos blog announcements, partner news or, the public Sophos news, blogs, you will see that we outline any extra steps that some folks may require to perform to do the upgrade from b 21 to b 22. And part of this is due to the new architecture. Some partition need the root partition needs to be resized as part of the process. And so devices with very small tight disk space may need to take some extra time and may have a couple of extra steps to, resize the partition before you can do the upgrade. And your device, if it's affected, will be flagged as such, before you do the upgrade. So you you know what you're, what you have to do beforehand. But this is absolutely a a subset of customers that might need to do that. And I think in some cases, Yeah. I know that, you know, one thing that we're learning people too is if because of the amount of that's happening in that particular release, it may just be that some of that repartitioning, might just take a little bit longer. So, you have to have a little more patience when you're upgrading than, than with some of the previous releases. Yeah. Yeah. A normal release, you could, apply it, shut it down, be back up and running in a couple of minutes. It might take five or ten minutes now. And as Barbara mentioned, it affects a very small number of devices out there. So read the information in the blogs for the full details. And that, I think, was all the questions that I could find as of the time. I was looking, Barbara. Has anything else come in. while I The the. only thing that I would say that there were there were a few questions related to I think they're actually all from the same, but a few questions related to the backup functionality. Is there a KBA? And, you know, there's no easy way to do it if the if the backup key is is valid, things like that. We're gonna take that away as an action item and make sure that I I think that should be documented in the product documentation. But if it's not, we'll take that away as an action item and make sure that we've got something because particularly in light of that, SonicWall breach, it might be that you have customers saying, well, how does it work for us? And you might need something to point them to. So so let us take that one away and and see if we can come back to you with a response to give you good information about all of that. Yeah. Actually, I just did a quick Google of softwares firewall backups, and there is a ton of documentation and even videos that demo it. So, there's that as well. Yeah. I mean, our backup functionality as it stands today, I think it's been around. I think the Secure Storage Master Key, we introduced about five years ago. So it's it's not new. It's just we wanted to remind people about that because they may be the kind of questions that you're getting from your customers right now. Yeah. Yeah. Yep. Okay. So if we haven't got any more questions, I think, all that remains to say is, as we mentioned, you will receive a link to the recording after this. And, thank you so much for to everybody who's managed to join us today. We hope we were able to give you a little bit of inspiration for where to go next with v twenty two. We look forward to seeing many of you getting this deployed in the coming weeks. You know? It's, I'm sure many of you have got holidays coming up, so it's a great time to upgrade your firewall. And, on that note, I say thank you, Chris. Thanks to all of you. And, you know, keep joining our webinars. We look forward to getting your feedback. If there's anything you want from us, please do, reach out. Thanks very much, everybody.