SonicOS/X 7.0.1 Release Notes

Version 7.0.1 July 2021

July 2021

This version of SonicOS 7.0.1 is a maintenance release for existing platforms and resolves many issues found in previous releases. This release also introduces support for the SonicWall NSa 4700, NSa 6700 and NSsp 13700 network security appliances.

Supported Platforms

Starting in this release, SonicWall has dropped the 'R' label from SonicOS release numbers.

The platform-specific versions for this unified release are all the same:

Platform Firmware Version
TZ Series 7.0.1-5018
NSa Series 7.0.1-5018
NSv Series 7.0.1-5018
NSsp Series 7.0.1-5018

The following SonicWall network security appliances are supported by this release of SonicOS 7.0.1:

  • NSa 2700
  • NSa 3700
  • NSa 4700
  • NSa 6700
  • NSsp 13700
  • NSsp 15700
  • TZ270 / TZ270W
  • TZ370 / TZ370W
  • TZ470 / TZ470W
  • TZ570 / TZ570W
  • TZ570P
  • TZ670
  • NSv 270
  • NSv 470
  • NSv 870

NSv 270/470/870 deployments are supported on the following platforms:

  • AWS (BYOL and PAYG)
  • Microsoft Azure (BYOL)
  • VMware ESXi
  • Microsoft Hyper-V
  • Linux KVM

Resolved Issues

Issue ID Issue Description
GEN7-15543 On NSsp 15700, BGP/OSPF failed to establish on a numbered VPN tunnel interface when VPN policy is established on a non-master blade.
GEN7-16351 When adding or editing an LDAP server on an NSsp 15700 with Authentication Partitioning enabled, there is no Partition field or option.
GEN7-21526 After being disconnected, a second PPPoE connection does not connect until the firewall is rebooted.
GEN7-21977 Adding, deleting, configuring or managing a Dell X-Series switch on an NSa 3700 does not work as expected and displays the error, "Error: Index of the Extended Switch Instance."
GEN7-22545 Packet drops on WAN interface cause interruption in internet access.
GEN7-22706 Detecting a SonicWall Switch beyond the first level in multi-level daisy chaining takes a long time.
GEN7-22772 VLANs of the parent SonicWall Switch are not configured properly when using multi-level chaining.
GEN7-22826 RDP service bookmark cannot be launched from the portal page in Internet Explorer and Safari browsers.
GEN7-22868 LDAP user and user group import should not show users/groups that were previously imported.
GEN7-22950 When updating signatures manually, the Signature File ID is incorrectly displayed as '3' in the POLICY | Security Services > Summary page. It should be '6'.
GEN7-22972 A LAN PC cannot open an SSH Terminal session after disabling and then enabling SSH management on the X0 interface.
GEN7-23108 The X1 interface cannot be enabled administratively after an NSv is registered using the manual keyset.
GEN7-23121 After upgrading tenants to new firmware, the tenants end up in failed state after 1 to 2 hours.
GEN7-23168 Serial Number and Auth Code should not be required when logging into the MySonicWall account after Manual Key Registration.
GEN7-23211 On NSv, the Protocol page is missing in the WAN PPPoE interface edit window.
GEN7-23389 DMZ Address Groups does not appear in the drop-down list on the firewall while configuring the interface in Transparent Mode.
GEN7-23408 Anti-Spyware signatures are not enabled by globally enabling Prevent/Detect.
GEN7-23410 When navigating to the Network > Zones page in the Classic user interface of a firewall running SonicOS 7.0.1, the user is redirected to the login page.
GEN7-23481 When the portshield host port has no link, the PortShield Mode management traffic does not work on any other linked portshield member ports.
GEN7-23502 There are issues with enabling and disabling interfaces.
GEN7-23504 Change the default algorithm to AESGCM-256 for non GroupVPN policies.
GEN7-23526 SSL VPN Virtual office RDP HTML5 bookmark does not work as expected.
GEN7-23583 On NSsp 15700, there is a Security policy issue when using both Content Filter Service (CFS) and user level authentication.
GEN7-23793 Additional gateways are not populated in a Multi-Path Route policy.
GEN7-23848 The Match Object field is not populated when creating or editing a custom match.
GEN7-23911 Route policies do not show correct address objects while trying to edit them.
GEN7-23957 Portshielding a Switch interface (Switch 2) to a VLAN interface on uplink results in an error.
GEN7-24136 Double interfaces are shown in the interface selection list during backend server communication.
GEN7-24137 During backend server communication, selection of a specific interface does not work as expected, but always appears as ANY.
GEN7-24224 Valid TCP packets with Urgent data are dropped.
GEN7-24458 On NSv for AWS, APIs do not show custom tags and values.
GEN7-24521 On NSv for AWS, AWS VPN does not show VPC details.
GEN7-24533 Login fails with auto generated guest accounts and the error, "Module not ready" is reported.
GEN7-24577 TCP Urgent - UI Implementation
GEN7-24741 In DNS settings after selecting the Specify DNS Servers Manually option and clicking Accept, the selected option is changed to Inherit DNS Settings Dynamically from WAN Zone.
GEN7-25457 On multi-blade NSsp, an error is displayed when enable/disable RIP/OSPF for a numbered tunnel interface.
GEN7-25770 Adding a multi-path route policy failed when configuring a VPN tunnel interface as a non-first interface.
GEN7-25830 The Use Address Object drop-down menu does not display the Address Object created by the user in the GATEWAY AV EXCLUSION LIST.
GEN7-26006 Resolved a PCI Compliance failed issue with error "HTTP Security Header Not Detected" on SSL-VPN portal.
GEN7-26336 With Virtual MAC addressing enabled, the firewall sends a Gratuitous ARP reply using the default MAC address after the interface renews its DHCP lease, resulting in the connection being lost.

Additional References

The following additional resolved issues in this release are listed here for reference:

GEN7-18760, GEN7-20414, GEN7-21047, GEN7-21094, GEN7-21234, GEN7-21357, GEN7-22055, GEN7-22353, GEN7-22362, GEN7-22480, GEN7-22545, GEN7-22684, GEN7-22685, GEN7-22826, GEN7-22877, GEN7-23173, GEN7-23184, GEN7-23191, GEN7-23220, GEN7-23281, GEN7-23287, GEN7-23329, GEN7-23363, GEN7-23364, GEN7-23368, GEN7-23375, GEN7-23389, GEN7-23392, GEN7-23411, GEN7-23453, GEN7-23490, GEN7-23518, GEN7-23526, GEN7-23531, GEN7-23541, GEN7-23549, GEN7-23565, GEN7-23572, GEN7-23582, GEN7-23700, GEN7-23760, GEN7-23798, GEN7-23807, GEN7-23840, GEN7-23870, GEN7-23871, GEN7-23873, GEN7-23885, GEN7-23904, GEN7-23911, GEN7-23935, GEN7-23939, GEN7-23966, GEN7-23987, GEN7-23991, GEN7-23992, GEN7-24034, GEN7-24054, GEN7-24056, GEN7-24057, GEN7-24059, GEN7-24060, GEN7-24061, GEN7-24062, GEN7-24063, GEN7-24064, GEN7-24109, GEN7-24134, GEN7-24135, GEN7-24140, GEN7-24178, GEN7-24187, GEN7-24292, GEN7-24305, GEN7-24329, GEN7-24348, GEN7-24429, GEN7-24567, GEN7-24568, GEN7-24587, GEN7-24633, GEN7-24689, GEN7-24693, GEN7-24751, GEN7-24756, GEN7-24810, GEN7-24819, GEN7-24847, GEN7-24884, GEN7-24888, GEN7-24895, GEN7-24933, GEN7-24971, GEN7-24994, GEN7-25000, GEN7-25456, GEN7-25473, GEN7-25521, GEN7-25538, GEN7-25566, GEN7-25568, GEN7-25606, GEN7-25624, GEN7-25746, GEN7-25818, GEN7-25819, GEN7-25833, GEN7-25944, GEN7-26348

Known Issues

Issue ID Issue Description
GEN7-22389 On NSsp 15700, the State Sync function displays a critical unexpected error that the Retransmit buffer's sequence number does not match the array element.
GEN7-23716 When a user logs in with the admin credentials or with user credentials that have SonicOS administrator privileges and then navigates to the Network > Zones page, the user is logged out and redirected to the login page.
GEN7-24864 Local packet mirror does not take effect.
GEN7-24957 On NSsp 15700, an error is always displayed the first time a user logs in with Time-based One Time Password (TOTP) enabled.
GEN7-25016 External storage display is wrong in TSR and in the SonicOS web management interface.
GEN7-25712 25G Direct Attach Cables (DAC) might not auto-negotiate speed and/or error correction on the NSsp 13700 X24-X31 ports.
GEN7-26035 OSPF becomes disabled on the unnumbered VPN tunnel interface after adding the link aggregation LAG's member when it is bound to a Layer 2 LAG port.
GEN7-26063

Auto-negotiation of multiple speeds might not work on the SFP/QSFP ports on NSsp 13700.

Workaround: Manually specify the link speed.

GEN7-26089

100M/10M interface status shows "No link" after shutdown/no shutdown by toggling the Enabled button.

Workaround:Set Link Speed to Auto Negotiate or 1 Gbps Duplex.

GEN7-26093 SSL VPN will not work if DPI and Stateful Firewall Security is applied before enabling SSL VPN.
GEN7-26154 PortShield is enabled by default when High Availability is enabled in Internal Settings.
GEN7-26188 The LED for LAN bypass does not work as expected.
GEN7-26204 VPN policy does not show gateway and networks if quotes are used in the VPN name.
GEN7-26374 High Availability on 10G interfaces sometimes shows a connected interface as not connected.
GEN7-26419 On NSsp 15700, interface Link Speed is not configurable in the SonicOSX web management interface, but is configurable in the CLI.
GEN7-26444 Log files stored in External Storage cannot be deleted when using the SonicOS web management interface.
GEN7-26447 File location is not correct when Primary Storage is chosen for log storage.
GEN7-26465 Included or Excluded Users/Groups settings of IPS Signature cannot be imported.
GEN7-26474 Unable to set WAN IP manually on SonicOS Setup Guide page when using Firefox browser.
GEN7-26534 Cannot change the logical probe settings to Physical monitoring and vice versa for WAN interfaces.
GEN7-26645 On NSa 4700, NSa 6700 and NSsp 13700, changes are not saved in user authentication method drop-down field under user settings.
GEN7-26710 On NSa 4700, NSa 6700 and NSsp 13700, not able to change partition in DEVICE | Users > Authentication Partition page for a newly added policy.
GEN7-26726 Purge option to delete log files from storage cannot be selected if two or more files are selected.
GEN7-26827 On NSsp 13700, the 10G RJ45 interface (X16-X19) Link Speed auto-negotiates to 5 Gbps when the cable is more than 10 feet long.
GEN7-26871 TSR does not show files present on the two storage devices.
GEN7-26888 SonicOS web management certificate did not have CN content of Subject and Issuer after changing Certificate Selection settings.
GEN7-26987

DHCP leases offered from X1 (WAN) are in the IP address range from the X0 lease scope. Occurs when the internal reserved VLAN is changed from the SonicOS/X 7.0.1 default by a converted or imported SonicOS 6.5 configuration.

Workaround: Configure reserved VLAN as the SonicOS/X 7.0.1 default of 3968 or higher as the starting VLAN.

GEN7-27038

On NSa 4700/6700 or NSsp 13700, child LDAP servers are not shown in LDAP server list in the contemporary user interface.

Workaround: Configure the LDAP servers using the classic user interface.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

  • Hidden
  • Hidden

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.
  • Hidden
  • Hidden