NetExtender Connection Error: MSI is too old, please upgrade NetExtender

When remote users attempt to establish an SSL-VPN connection to a SonicWall Gen 7 firewall running SonicOS 7.3.3 (or higher) or a Gen 8 firewall running SonicOS 8.2.0 (or higher), the connection may fail if they are using an outdated version of the NetExtender client.

During a failed connection attempt, the NetExtender interface displays the following error message: MSI is too old, please upgrade NetExtender!

Expected Behavior

To maintain cryptographic and infrastructure compliance, SonicWall enforces a minimum client version requirement on modern firmware releases. This error is the expected behaviour when endpoints attempt to connect using legacy NetExtender MSI installers:

• Affected NetExtender Versions: 10.3.0, 10.3.1, 10.3.2, and 10.3.3.
• Affected Firmware: SonicOS 7.3.3+ (Gen 7) and SonicOS 8.2.0+ (Gen 8).

To resolve this connection block, endpoints must be updated to NetExtender version 10.3.4, 10.3.5, or higher. Use one of the deployment methods outlined below to update your user base:

Method 1: Centralised Managed Deployment (GPO)
For corporate-managed, domain-joined assets, network administrators should package and push the latest compatible client installer across the fleet:

•  Download the latest NetExtender MSI installer (v10.3.4 or v10.3.5) from the official SonicWall portal.
• Utilise your centralized endpoint management solution such as Group Policy Objects (GPO) to deploy and update the client software across all remote systems.

Method 2: Manual Update to NetExtender EXE (Recommended)
Upgrading endpoints using the executable (.exe) installer is highly recommended because the EXE client natively supports background auto-updates, whereas legacy MSI installations do not. Transitioning to the EXE client ensures endpoints seamlessly receive future compatibility updates without requiring manual administrative intervention down the line.

• Direct your remote users to download the latest available client directly from the public download page.
• Instruct users to download and run the NetExtender Windows EXE (Executable) installer (v10.3.5 or higher).
• Follow the on-screen installation wizard prompts to overwrite the legacy version and complete the installation.

Critical Compatibility Notes

• Important Note for NetExtender 10.2.x Legacy Clients: Systems currently running legacy NetExtender 10.2.x versions do not support the automated client update features. If any remote users are still operating on a 10.2.x footprint, they must be updated manually using Method 1 or Method 2 above to transition onto a supported 10.3.x environment before they can successfully authenticate against Gen 7 (7.3.3+) or Gen 8 (8.2.0+) firewalls.
• Security Recommendation: SonicWall strongly recommends upgrading any deployment running NetExtender 10.2.341 or other legacy 10.2.x releases to the latest available NetExtender version. For additional security information, refer to SonicWall PSIRT Advisory SNWLID-2025-0006