Sophos Firewall

NGFWSecure coding rating: 0/100

Next-gen firewall.

Known CVEs (100)

CVE-2017-17023 ↗HIGH 8.12019
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure …
CVE-2018-3971 ↗HIGH 7.82018
An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data …
CVE-2018-3970 ↗MEDIUM 5.52018
An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return un…
…and 97 more · see all on the vendor page →

AnnouncementSophos Firewall v23 is now in early access
Vendor blogSep 30, 2026names “Sophos Firewall”
AnnouncementSecure by Design in practice: a year of progress on Sophos Firewall
Vendor blogJul 29, 2026names “Sophos Firewall”

No datasheets, whitepapers, case studies, videos, or demos linked yet.