SonicOS 8.2.3 Networking: Flexible as You Grow

More resilient routing, and Hybrid SD-WAN, built to fit the network you already have.

This is part 2 of 2. Part 1 covers the security features in SonicOS 8.2.3: secure defaults, SaaS and AI application-aware policy, Security Insights and protection for the firewall itself.

What are the networking features in SonicOS 8.2.3?

SonicOS 8.2.3 adds OSPF graceful restart, BGP in the management interface and ECMP for BGP. It also lets one SD-WAN group combine MPLS and VPN connections, and adds OAuth 2.0 for alert email and a custom captive portal.

We wanted to give customers more freedom in how they build their networks, without asking them to replace what already works.

What routing improvements are in SonicOS 8.2.3?

Routing that keeps traffic moving

SonicOS 8.2.3 is a significant release for dynamic routing:

• OSPF graceful restart. During a firmware upgrade, a high availability failover, or a process restart, the firewall preserves its forwarding state. Neighboring routers in helper mode keep forwarding traffic through it instead of tearing down adjacencies, so planned maintenance causes less routing disruption.
• BGP in the management interface. BGP global settings, neighbors, and advertised networks are configured on structured pages, with less reliance on the command line. Configurations are easier to build, review, and troubleshoot.
• ECMP for BGP. When several equal-cost BGP paths lead to the same destination, the firewall can use them simultaneously, distributing traffic per flow for IPv4 and IPv6. Customers with multiple providers or multi-homed links put more of their capacity to work, and if one path fails, the others keep carrying traffic.

What is Hybrid SD-WAN?

SD-WAN that builds on the network you have

Many organizations are moving to software-defined WAN, but few can retire their MPLS circuits overnight. With Hybrid SD-WAN groups, a single SD-WAN group can combine MPLS and VPN tunnel interfaces under one policy. Keep MPLS as the preferred path for traffic that needs it, use VPN connectivity for the rest, and manage both in a single design.

Adoption is incremental. Existing SD-WAN groups continue to work; create a Hybrid group when you are ready.

For partners: WAN modernization is a phased project rather than a redesign, so customers can start where they are.

What else is new for authentication and access?

Modern authentication, branded access

• OAuth 2.0 for alert and report email. Mail providers, including Microsoft, are retiring basic authentication. SonicOS 8.2.3 can authenticate to the mail server it uses for alerts and scheduled reports with OAuth 2.0 tokens instead of a username and password, so the notifications your team depends on keep flowing.
• Custom captive portal. Brand the firewall login page with your own logo, background, text, and buttons, so that administrators and users, including SSL VPN, wireless, and SAML users, see a login page that reflects your organization. SonicOS validates the customization and falls back to the default page if a custom configuration is invalid.

Before you upgrade to SonicOS 8.2.3

SonicOS 8.2.3 runs on SonicWall Gen 8 firewalls: the TZ80 through TZ680, the NSa 2800 through NSa 6800, and NSv virtual firewalls.

• Read the release notes, including the known issues and upgrade guidance.
• Remember that Phase 2 defaults apply to new deployments. Upgraded firewalls keep their existing settings.
• If you manage your firewalls with NSM, use NSM 4.5.0, which is available alongside SonicOS 8.2.3.

Frequently asked questions

Can I use MPLS and VPN in the same SD-WAN group?

Yes. Hybrid SD-WAN groups combine MPLS and VPN tunnel interfaces under one policy. Existing SD-WAN groups continue to work.

What does ECMP for BGP do?

When several equal-cost BGP paths lead to the same destination, the firewall uses them simultaneously and distributes traffic per flow for IPv4 and IPv6.

Which NSM version should I use?

Use NSM 4.5.0 with SonicOS 8.2.3.

Moving the network forward

Networks do not stand still. With SonicOS 8.2.3, the network adapts to the way you work, and administration keeps getting simpler. Read part 1 of this series to see how the same release makes security the default and brings SaaS and AI awareness to policy.

SonicOS 8.2.3 and NSM 4.5.0 are now available. Review the SonicOS 8.2.3 release notes for the full list of enhancements, supported platforms, and upgrade considerations; download the firmware from MySonicWall, and talk to your SonicWall partner or account team about what this release can do for your network.

SonicOS 8.2.3: Greater network flexibility. Simpler management.

Next steps

• Download: Get SonicOS 8.2.3 and NSM 4.5.0 from MySonicWall.
• Plan: Read the SonicOS 8.2.3 release notes for upgrade guidance, including OSPF graceful restart considerations.
• Modernize your WAN: Talk to your SonicWall partner or account team about a phased Hybrid SD-WAN design.
• Update alert email: Switch alert and report email to OAuth 2.0 before your mail provider retires basic authentication.
• Partners: Offer customers a phased WAN modernization plan that starts from the network they have.
• Keep reading: Read Part 1 to strengthen your security baseline with SonicOS 8.2.3.