SonicOS 8 Release Notes

Technical Documentation>  SonicOS 8>  Version 8.0.4-8014
Table of Contents

Version 8.0.4-8014

December 2025

Compatibility and Installation Notes

  • Most popular browsers are supported, but Google Chrome is preferred for the real-time graphics display on the Dashboard.
  • A MySonicWall account is required.

Important

  • The TZ80:

    • Must be licensed before it can be configured or used.
    • Must always be connected to the Internet. It cannot be used in a closed network environment.

  • Beginning with SonicOS 8.0.0, these SonicPoint devices are no longer supported:

    • SonicPoint-N
    • SonicPoint-NDR
    • SonicPoint-Ni/Ne
    • SonicPoint-ACe/ACi/N2
  • Support for the WEP and TKIP security protocols has been deprecated.
  • Support for the Radio Role > Mesh Gateway has been deprecated in the TZ wireless models.

  • Settings from Gen 7 firewalls running SonicOS 7.3.x cannot be imported into Gen 8 firewalls operating on SonicOS 8.0.4 or 8.1.0 due to version incompatibility. However, SonicOS 8.2.0, planned for all Gen 8 firewalls, will introduce support for importing configurations from SonicOS 7.3.x, enabling a streamlined migration process.

The platform-specific version for this unified release is the same:

TZ Series Firmware Version NSa Series Firmware Version
TZ80 8.0.4-8014 NSa 2800 8.0.4-8014
TZ280 8.0.4-8014 NSa 3800 8.0.4-8014
TZ280P 8.0.4-8014 NSa 4800 8.0.4-8014
TZ280W 8.0.4-8014 NSa 5800 8.0.4-8014
TZ380 8.0.4-8014 NSa 6800 8.0.4-8014
TZ380W 8.0.4-8014    
TZ480 8.0.4-8014    
TZ580 8.0.4-8014    
TZ680 8.0.4-8014    

What's New

This maintenance release introduces additional support and resolves previously reported issues.

  • SonicOS 8.0.4 adds support for the TZ280P, TZ280W and NSa 6800.
  • SonicOS 8.0.4 supports the TZ80, TZ280, TZ380, TZ380W, TZ480, TZ580, TZ680, NSa 2800, NSa 3800, NSa 4800, and NSa 5800.
  • SonicOS 8.0.4 includes in-product migration, where you can import settings from your:
    • SonicOS Gen 6/6.5 devices to your new SonicOS Gen 8 devices.
    • SonicWall SOHO/SOHOW security appliance to your new SonicWall TZ80.
    • SonicWall TZ270 security appliance to your new SonicWall TZ280.
    • SonicWall TZ570P security appliance to your new SonicWall TZ280P.
    • SonicWall TZ270W security appliance to your new SonicWall TZ280W.
    • SonicWall TZ370 security appliance to your new SonicWall TZ380.
    • SonicWall TZ370W security appliance to your new SonicWall TZ380W.
    • SonicWall TZ470 security appliance to your new SonicWall TZ480.
    • SonicWall TZ570 security appliance to your new SonicWall TZ580.
    • SonicWall TZ670 security appliance to your new SonicWall TZ680
    • SonicWall NSa 2600 or NSa 2700 security appliance to your new NSa 2800.
    • SonicWall NSa 3600 or NSa 3700 security appliance to your new NSa 3800.
    • SonicWall NSa 4600 or NSa 4700 security appliance to your new NSa 4800.
    • SonicWall NSa 5600 or NSa 5700 security appliance to your new NSa 5800.
    • SonicWall NSa 6600 or NSa 6700 security appliance to your new NSa 6800.

    For more information, refer to the SonicOS 8 Migration Requirements Reference Guide.

Resolved Issues

Issue ID Issue Description

GEN8-12036

UI returns an error when trying to create an SNMP user group with an '@' in the name.

GEN8-12007

Failed to authenticate to Duo Proxy MFA with NetExtender 10.3.

GEN8-11345

User sessions on the Device > Users > Status page will disappear when using NetExtender to connect with an IPv6 address.

GEN8-11185

IPv6 VLAN interface sends RA packets with the wrong source MAC address.

GEN8-11159

Getting error API endpoint is incomplete when trying to delete all packet capture files from the secondary storage files page.

GEN8-10897

Locked out IP addresses are not syncing with the HA standby node.

GEN8-10884

M1 storage card lacks any card info (Serial, SN, storage sig, etc.) in the system log.

GEN8-10870

Inactivity timeout is not functioning for SSLVPN web portal connections.

GEN8-10839

VLAN sub-interface subnet route policies are greyed out after firmware upgrade on HA setup.

GEN8-10805

The security LED on the front panel turns from green to off after uploading a firmware.

GEN8-10740

Console prints i801_smbus 0000:00:1f.4: SMBus is busy, can't use it! When NSa4800/5800 powers on with a 1G SFP module, Finisar FCMJ-8520-3 is plugged in.

GEN8-10323

Sometimes traffic fails after HA failover when HA Virtual MAC and Override Virtual MAC are enabled simultaneously.

GEN8-5960

UI error Request failed with status code 400 occurs when importing over 100 LDAP users.

GEN8-5635

The mail OTP user login always fails when the Enforce login uniqueness option is enabled.

Known Issues

Issue ID Issue Description

GEN8-13779

Unexpected audit log Interface LAN/DMZ L2 Bridged Mode: VLAN Filtering Mode reported when editing interfaces.

GEN8-10813

Override Default MAC Address on W0 Interface is not supported.

GEN8-10812

Raised the DNS proxy rule limit to 1024.

GEN8-7283

WPA2/WPA3-EAP is not supported on TZs with an internal wireless module operating in station mode.

GEN8-5439

User Status INACTIVITY REMAINING shows "No Data" for user login through IPv6.

Additional References

GEN8-13556, GEN8-13494, GEN8-13333, GEN8-13332, GEN8-13104, GEN8-12761, GEN8-12673, GEN8-11305, GEN8-11143, GEN8-10837.

Chat