How do I safely perform a firewall firmware downgrade?

09/17/2020 96 9168

DESCRIPTION:

This article describes how to safely perform a Firmware downgrade by using the following 3 supported methods:

• Method 1: Boot from Local Backup Firmware to return to the previous Firmware and configuration version

• Method 2: Boot from Cloud Backup Firmware to return to any previous saved Firmware and configuration version

• Method 3: Upload the older firmware and boot with Factory Default. Then import a configuration file previously exported from an equal or lower version of Firmware.

CAUTION: For Method 3, Boot with current settings option is  NOT SUPPORTED and will cause corruption on the configuration and unexpected behavior on the firewall. If this happens, you will need to perform one of the 3 mentioned downgrade methods if still available, or manually redo the configuration in order to be fully supported again and have a stable environment.

TIP: Related KB articles:

How To Put the SonicWall into Safe Mode

How to create Cloud backup of SonicWall settings

How to Understand and Resolve Settings Corruption

Product Lifecycle Table for supported Firmware versions

RESOLUTION:

Method 1: Boot from Local Backup Firmware to return to the previous Firmware version

1. Go to Manage | Firmware & Backups
2. Navigate to Local Backup Firmware Version
3. Click Boot Button and click on Boot Local Backup firmware with Local Backup Configuration.

This will restart the firewall and boot with the selected Backup firmware and Backup Configuration.

NOTE: Local Backup only stores 1 Firmware and 1 Configuration.

Method 2: Boot from Cloud Backup Firmware to return to any previous saved Firmware

1. Go to Manage | Firmware & Backups
2. Navigate to Cloud 
3. Select the desired Firmware Version and click on Show x Configuration Files
4. Select the desired Configuration file and Click Boot Button
5. then click on Boot Local Backup firmware with Local Backup Configuration.

This will restart the firewall and boot with the selected Backup firmware and Backup Configuration.

 NOTE: With 6.5 & above firmware, SonicWall has option to create Cloud Backup of settings exp files. Maximum 3 configuration backups are supported per firmware version.

Method 3: Upload the older firmware and Boot with Factory Default Settings. . Then import a configuration file previously exported from an equal or lower version of Firmware.

1. Go to Manage | Firmware & Backups
2. Click Upload Firmware and upload the desired older firmware version.
3. Navigate to Uploaded Firmware Version and click Boot
4. Click Boot Uploaded Firmware with Factory Default Configuration

This will restart the firewall and boot with the Factory Default Configuration

5. Once the firewall restarts, access to the default IP Management interface with the default admin credentials and go to Manage | Firmware & Backups

6. Click Import/Export Configuration

7. Click Import Configuration and select a valid configuration file previously exported from an equal or lower version of Firmware.

Once confirmed, the firewall will restart and load the selected configuration file settings.

CAUTION: when importing the configuration on Step 7, please ensure that the configuration file is valid. Configuration files from higher Firmware Versions, or from an incorrect Downgrade, are NOT SUPPORTED and will cause unexpected behavior on the firewall.