Version 4.40.0

April 2026

Important

Settings can be exported from one firewall to another, but not every SonicWall model is compatible with all others. Similarly, some firmware versions are not compatible with subsequent versions as new features get added or as changes are made to existing features. Understand the compatibility described in the following section to avoid possible corruption from importing unsupported settings.

Compatibility and Installation Notes

SonicOS 6.5.1.3 is the minimum version supported for migrating settings to a firewall running SonicOS 7. If you try to migrate from an older version of SonicOS, it becomes a two-step process. Update the firewall to SonicOS 6.5.1.3 or higher. For NSv Series the minimum version supported for migration is SonicOS 6.5.0. Then use the migration tool to create the settings file to import to the SonicOS 7 firewall.

Certain settings such as Global Bandwidth Management, Virtual Assist, Content Filter Client Enforcement, and others cannot be imported into SonicOS 7. A detailed matrix showing the compatible Source and Destination SonicWall firewalls is provided in the KB article, Can Settings be Exported/Imported from One SonicWall to Another? Refer to it for the most current information.

The Migration Tool does not support firewalls running SonicOS with Policy Mode. This includes any of the NSv Series devices that are running in Policy Mode and the NSsp 15700.

The SonicWall Migration Tool allows you to migrate some settings from third-party vendors. In the following table, the X indicates which settings can be migrated for each vendor and which are not supported at this time.

Feature	Checkpoint	Cisco	Fortinet	Palo Alto	Sophos	Watchguard
Zone	X	X	X	X	X	X
Access Rule	X	X	X	X	X	X
Network Object	X	X	X	X	X	X
Status Route	Not supported	X	X	X	Not supported	X
Service	X	X	X	X	X	X
NAT	X	X	Not supported	X	Not supported	X
VPN	Not supported	Not supported	Not supported	Not supported	Not supported	Not supported

SonicWall does not fully test all features for all third-party devices. To minimize migration issues be sure to test the migrated setting in your test environment before deploying to production.

When migrating from third-party devices to SonicWall with the migrated configuration, the HTTPS management on the interface is disabled. You must enable it via CLI to access the management web UI. For more information, refer to KB article How can I configure web-management using CLI.

What's New

This release provides fixes for previously reported issues and the following enhancement:

• Added support for migrating to the SonicOS 7.3.2-7010 firmware version.

Resolved Issues

Issue ID	Issue Description
DEVT-3429	Issue: HTTP management settings in VPN policies are not disabled when migrating configuration from SonicOS 6 to SonicOS 7. Fix: Disabling the Management over HTTP in VPN policies (if enabled) when migrating to SonicOS 7.
DEVT-3459	Issue: NSA 2700 displays the error "LAN is not a reasonable value" when attempting to modify X0 settings after migrating from SonicOS 6 to SonicOS 7. Fix: Fixed an issue of misconfigured LAN Zone properties on SonicOS 6 migrating to SonicOS 7.
DEVT-3532	Issue: When migrating from WatchGuard and exporting settings as CLI, duplicate address objects were generated within address groups. Fix: The migration tool now removes duplicate address objects from CLI format imports for WatchGuard configurations.
DEVT-3533	Issue: When migrating from WatchGuard, all FQDN address objects were incorrectly assigned to the LAN zone. Fix: All FQDN address objects without a specified zone are now assigned to the WAN zone. After importing settings to the target firewall, administrators must review and validate zone mappings for all FQDN address objects. Incorrect mappings may lead to unintended traffic behavior or disruption of expected traffic flow.

Known Issues

Not Applicable.

Additional References

DEVT-3533, DEVT-3532.