SonicOS 8 Release Notes
Table of Contents
Version 8.0.3-8011
August 2025
The platform-specific version for this unified release is the same:
| TZ Series | Firmware Version | NSa Series | Firmware Version |
|---|---|---|---|
| TZ80 | 8.0.3-8011 | NSa 2800 | 8.0.3-8011 |
| TZ280 | 8.0.3-8011 | NSa 3800 | 8.0.3-8011 |
| TZ380 | 8.0.3-8011 | NSa 4800 | 8.0.3-8011 |
| TZ380W | 8.0.3-8011 | NSa 5800 | 8.0.3-8011 |
| TZ480 | 8.0.3-8011 | ||
| TZ580 | 8.0.3-8011 | ||
| TZ680 | 8.0.3-8011 |
This maintenance release provides fixes for previously reported issues.
Resolved Issues
| Issue ID | Issue Description |
|---|---|
| GEN8-11038 | Guest Wi-Fi users cannot access the internet with the Enable Policy Page without authentication option enabled under Guest Services. |
| GEN8-10726 | When the password is changed, but doesn’t meet the security requirement for 8 different characters from the old password, the warning message is not properly displayed. |
| GEN8-10638 | The Control Plane Flood Protect feature is not enforced and of no use. This was a carryover from previous generations and now being removed from the user interface. |
| GEN8-10453 | When the firmware auto update feature is enabled on an HA deployment, if the new firmware auto download on HA active firewall is slow and takes over 45 seconds to complete, the downloaded firmware cannot be synced to HA idle firewal; hence, the auto install cannot complete as expected. This works as expected on standalone units. |
| GEN8-10311 |
Before registration, if you enable the Enable Logging to Storage option, then you will be unable to view the logs in the Monitor > Logs > System Log page due to the error message Work around: Register the firewall. |
| GEN8-9970 | The egress rate for the X1 interface is not shown on the Monitor > Real-Time Charts > System Monitor Interface Usage page. |
| GEN8-9856 | Unable to add a FQDN Address object to the Address group which is part of a NAT policy. |
| GEN8-9855 | The certificate error, “HTTPS handshake SSLv3 alert: certificate unknown,”:is seen when accessing the HTTPS Management page. |
| GEN8-9816 | The CSE Connector won't show up until you click the Synchronize button on the Device License Registration page. |
| GEN8-9784 | The numbered VPN tunnel interface shows incorrectly when getting the interface (ifOperStatus) using SNMP. |
Known Issues
| Issue ID | Issue Description |
|---|---|
| GEN8-11677 | NetExtender failed to connect to IPv6 SSLVPN server in the first login when the local user enabled the option User must change password in User Settings, after successfully changing the password the next login. |
| GEN8-11345 | The User sessions in Device> Users > Status page disappears when using NetExtender to establish connection with IPv6 address. |
| GEN8-11159 | Getting the error API endpoint is incomplete when trying to delete all packet capture files from Secondary Storage Files page. |
| GEN8-11155 | User Domain field is not displayed after changing SS LVPN Authentication Type to Certificate. |
| GEN8-10884 | M1 storage card does not have any card information (serial number, etc.) in the system log. |
| GEN8-10805 | The security LED on front panel is changing from Green to off after uploading firmware. |
| GEN8-10740 | Console displays i801_smbus 0000:00:1f.4: SMBus is busy, can't use it! when NSa4800 or NSa 5800 firewall powers on with 1G SFP module Finisar FCMJ-8520-3 plugged in. |
| GEN8-9886 | Unable to use custom SSL VPN zone object in SSL VPN client profile configuration. |
Additional References
GEN8-10553, GEN8-10910