Version 4.38.0

March 2025

Important

Settings can be exported from one firewall to another, but not every SonicWall model is compatible with all others. Similarly, some firmware versions are not compatible with subsequent versions as new features get added or as changes are made to existing features. Understand the compatibility described in the following section to avoid possible corruption from importing unsupported settings.

Compatibility and Installation Notes

SonicOS 6.5.1.3 is the minimum version supported for migrating settings to a firewall running SonicOS 7. If you try to migrate from an older version of SonicOS, it becomes a two-step process. Update the firewall to SonicOS 6.5.1.3 or higher. For NSv Series the minimum version supported for migration is SonicOS 6.5.0. Then use the migration tool to create the settings file to import to the SonicOS 7 firewall.

Certain settings such as Global Bandwidth Management, Virtual Assist, Content Filter Client Enforcement, and others cannot be imported into SonicOS 7. A detailed matrix showing the compatible Source and Destination SonicWall firewalls is provided in the KB article, Can Settings be Exported/Imported from One SonicWall to Another? Refer to it for the most current information.

The Migration Tool does not support firewalls running SonicOS with Policy Mode. This includes any of the NSv Series devices that are running in Policy Mode and the NSsp 15700.

The SonicWall Migration Tool allows you to migrate some settings from third-party vendors. In the following table, the X indicates which settings can be migrated for each vendor and which are not supported at this time.

Feature	Checkpoint	Cisco	Fortinet	Palo Alto	Sophos	Watchguard
Zone	X	X	X	X	X	X
Access Rule	X	X	X	X	X	X
Network Object	X	X	X	X	X	X
Status Route	Not supported	X	X	X	Not supported	X
Service	X	X	X	X	X	X
NAT	X	X	Not supported	X	Not supported	X
VPN	Not supported	Not supported	Not supported	Not supported	Not supported	Not supported

SonicWall does not fully test all features for all third-party devices. To minimize migration issues be sure to test the migrated setting in your test environment before deploying to production.

When migrating from third-party devices to SonicWall with the migrated configuration, the HTTPS management on the interface is disabled. You must enable it via CLI to access the management web UI. For more information, refer to KB article How can I configure web-management using CLI.

What's New

This release provides fixes for previously reported issues and the following enhancement:

• Added support for migrating to the SonicOS 7.1.3-7015 firmware version.
• Added support for migrating NSv Series running SonicOS 6.5.0 firmware to SonicOS 7 firmware version.

Resolved Issues

Issue ID	Issue Description
DEVT-3288	Issue: Allow migrating the NSv configurations on running SonicOS 6.5.0 version. Fix: Added support for migration of NSv running SonicOS 6.5.0 firmware to NSv SonicOS 7 firmware.
DEVT-3318	Issue: Extended messaging upon success of migration. Fix: Removed support for firmware versions with critical vulnerabilities.

Known Issues

Issue ID	Issue Description
DEVT-3281	Issue: Empty Address Groups get migrated without any error or warning. Workaround: Recommended to use the latest SonicOS version.
DEVT-3364	Issue: NSA 6650 to NSa 6700 Migration of settings causes VLANs from X3 to move to the management interface on NSA6700. Workaround: To assign the VLAN to the correct interface, the user can drop the management interface while remapping the interface and assign the interface X3 to X28.

Additional References

DEVT-3246.