SonicOS/X 7.0.1 Release Notes

Technical Documentation > SonicOS/X 7.0.1 Release Notes > SonicWall SonicOS 7.0.1 > Version 7.0.1-5100 March 2023

Version 7.0.1-5100 March 2023

March 2023

This version of SonicOS 7.0.1 (7.0.1-5100) is a maintenance release for currently shipping NSsp 15700 platforms and resolves issues found in previous releases.

Supported Platforms

This release applies only to the NSsp 15700 platform.

For information about the latest release related to other platforms, please see Version 7.0.1-5111 April 2023.

Resolved Issues

Issue ID	Issue Description
GEN7-28170	Appflow Reports displays the incorrect number of threats for GAV, Anti-Spyware, Intrusion Prevention, and Applications.
GEN7-31592	Opening up a new tab by right-clicking on an existing browser tab showing Interfaces and then clicking Duplicatemay display the error `Invalid authentication: SN and EPAID do not match`.
GEN7-32232	The VPN tunnel interface may periodically become inactive with IKE response packets dropped due to IKE packets from the stack not allowed in Policy Mode.
GEN7-32518	Slow transfer rates may be experienced when using TFTP.
GEN7-32882	Slow web traffic over IPSec VPN may be experienced with ESP packets dropped by the remote firewall because of an error in the checksum when the tunnel VPN is established on the slave blade of the device when management traffic is being used.
GEN7-33499	Application Security Policies may not function correctly when App Group indexes are not set correctly when objects are first created after registration.
GEN7-33612	A Guest account may be able to access the internet after the account session time has been expired
GEN7-33643	When editing the administration privilege of local users, the updates are not displayed on Local Users page.
GEN7-33748	When Virtual MAC is enabled, during transition from primary to backup in a High Availability configuration, the standby appliance uses the shared IP to generate ARP broadcasts.
GEN7-33848	SlowTFTP traffic may be experienced when traversing the firewall. Option ACK messages are dropped by the firewall when received on different blades than the Read Request Forward blade.
GEN7-34183	In a High Availability environment, the default routes for the directly connected interfaces are not synchronized to the secondary device.
GEN7-34397	SNMP packets are dropped with the error `NAT policy generate unique remap port failed` due to incorrect multi-blade traffic handling for SNMP traffic.
GEN7-34773	DPI-SSL may intermittently not be enforced.
GEN7-34774	The Don't redirect unauthenticated users to log in setting in the Action Profile object does not function as expected. Unauthenticated users are not bypassed from user-specific policies.
GEN7-35294	Security Policy Block Page for Website Category blocking for authenticated user displays different Security Policies instead of the higher- priority Security Policy for Authenticated User Group.
GEN7-35491	The firewall may not initiate Single Sign-on (SSO) consistently on denied websites when the Zone- based SSO is set to Enforced.
GEN7-35786	The sorted order of items is incorrect when sorting NAT policies by Name, Created, or Updated.
GEN7-35966	Single Sign-on (SSO) was not triggered for SSO enforcement before detecting that it is needed by the policies.
GEN7-36684	A design change now allows special management (no user policy required) only using the MGMT port on appliances that do not have a management port. For the appliances that have a management port, the user will need to add an explicit management rule to allow management service on a non-management port. Administrators must create an allow rule to allow management services using non-management ports (such as X0 and X1) and enable the corresponding management service on each of the interfaces.
GEN7-36980	ICMP traffic fails over a numbered tunnel interface when the packets are larger than 1472 because the remote firewall receives an incorrect checksum.
GEN7-37018	When an LDAP user without administration privileges attempts to log in from a LAN, the error message `Unknown error` is displayed instead of a more specific reason, such as `not enough privilege`.
GEN7-37069	Cannot export Security Policies to a CSV file.
GEN7-37070	Sorting NAT Policies by Hits and other new columns does not function as expected.
GEN7-37134	Under some conditions, Content Filtering Service (CFS) DNS reply handling and request time out ,which can trigger conflicts in the handling of cache timers and cause an unexpected restart of the appliance.
GEN7-37633	Connections fail over SSL-VPN with users using Two-Factor authentication in addition to RADIUS authentication.
GEN7-38154	SonicOS Stack-based Buffer Overflow Vulnerability. For more information, refer to CVE-2023-0656.

Additional References

The following additional resolved issues in this release are listed here for reference:

GEN7-24931, GEN7-27414, GEN7-28768, GEN7-29045, GEN7-29907, GEN7-31205, GEN7-31255, GEN7-31307, GEN7-31354, GEN7-31779, GEN7-32451, GEN7-32452, GEN7-32577, GEN7-33185, GEN7-33349, GEN7-33505, GEN7-33628, GEN7-33637, GEN7-33697, GEN7-33878, GEN7-34011, GEN7-34168, GEN7-34186, GEN7-34209, GEN7-34263, GEN7-34488, GEN7-34824, GEN7-34842, GEN7-34884, GEN7-34967, GEN7-35037, GEN7-35162, GEN7-35174, GEN7-35499, GEN7-35565, GEN7-35609, GEN7-35621, GEN7-35646, GEN7-35648, GEN7-35801, GEN7-35826, GEN7-35967

Known Issues

Issue ID	Issue Description
GEN7-31899	The configuration on the DOS Policy page cannot be edited.
GEN7-32261	OSPFv3/RIPng]OSPFv3/RIPng cannot be established over trunked VLAN or sub-VLAN interfaces.
GEN7-34690	The Resolved Address is not displayed when the domain is resolved when using a IPv6 DNS server.
GEN7-35781	Adding an ECMP route with Tunnel VPN as the last interface fails when the Gateway Number is either 3 or 4.
GEN7-36708	Unable to load a build or export a file when performing out-of-band management using the MGMT port. Used a different port for out-of-band management or the system being used needs to be on the same subnet as the MGMT port.
GEN7-37532	The active unit in a High Availability configuration shows the same MGMT IP for both the Primary and Secondary appliances.

< Previous Section Next Section >

Was This Article Helpful?

Help us to improve our support portal

Yes! Not Really