SonicOS 7.2 Release Notes

Technical Documentation
Table of Contents

Version 7.2.1-7003

April 2025

This version of SonicOS 7.2.1 is a feature release for existing platforms and also resolves issues found in previous releases.

Important

  • If managing your SonicWall firewalls using Network Security Manager (NSM), do not upgrade your firewalls to SonicOS 7.2 until NSM 3.0 becomes available.

  • SonicOS 7.2 is not currently FIPS-compliant or Common Criteria compliance.
  • SonicWall firewalls running SonicOS 7.2 cannot be managed using Global Management System (GMS).
  • Downgrading to SonicOS 7.0.1 from SonicOS 7.2 is not supported.
  • Upgrading SonicOS 7.0.1 to 7.2 for NSv requires a fresh installation of NSv for all platforms. (For more information, refer to NSv upgrade from 7.0.1 to 7.1.X.)
  • Use the Firmware Auto Update Feature in SonicOS 7.2 to ensure that your firewall always has the latest updates for critical vulnerabilities. (For more information, refer to Firmware Auto Update.)

Compatibility and Installation Notes

  • Most popular browsers are supported, but Google Chrome is preferred for the real-time graphics display on the Dashboard.
  • A MySonicWall account is required.

Supported Platforms

The platform-specific version for this unified release is the same:

Platform Firmware Version
TZ Series 7.2.1-7003
  • TZ470 / TZ470W

What's New

  • Renewal of DHCP IP addresses on the wireless interface (W0) when the connection drops and returns or when switching networks.

Resolved Issues

Issue ID Issue Description
GEN7-52794 Overriding the MAC address on the W0 interface does not work.

Known Issues

Issue ID Issue Description
GEN7-52544 On the Access Point Monitor page, with a wireless client to connected to the Access Point, the client Allow and Deny buttons are always grayed-out even if the ACL function is enabled or disabled.
GEN7-52611 NAT policy info in the Access Policy log is not shown in the log message when Flow Report is enabled.
GEN7-52723 SAML references are shown in Tech Support Report (TSR) when running in Policy Mode even though it is not supported.
GEN7-52894 An interface that is part of a custom zone with a name that contains special characters shows the zone and mode as being unassigned.
GEN7-52995 The User session option Open user's login status window in the same window rather than in a popup does not work for a SAML user if accessing the HTTPS URL directly.
GEN7-53036 The Global VPN Client (GVC) fails to connect when using the NETBIOS format "Domain\username" to connect with the Authentication Partition Domain.
GEN7-53118

For SAML configuration and downloading the XML metadata from an Identity Provider, and then importing this XML file to the firewall, the,firewall will display: Restart Required!. After clicking the Restart button , only the Identity Provide certificate is saved; the IDP configuration will not be saved.

Save the firewall configuration before restarting the firewall.
GEN7-53128

The Redirect Authentication page may Intermittently not display when using SAML with One Login or GSuite IDP when DPI-SSL is enabled.

Exclude the SAML IDP domains in the DPI-SSL Common Name exclusion list.
Chat