Version 8.2.0-8009

February 2026

Compatibility and Installation Notes

• Most popular browsers are supported, but Google Chrome is preferred for the real-time graphics display on the Dashboard.
• A MySonicWall account is required.

The platform-specific version for this unified release is the same:

TZ Series	Firmware Version	NSa Series	Firmware Version
TZ80	8.2.0-8009	NSa 2800	8.2.0-8009
TZ280	8.2.0-8009	NSa 3800	8.2.0-8009
TZ280P	8.2.0-8009	NSa 4800	8.2.0-8009
TZ280W	8.2.0-8009	NSa 5800	8.2.0-8009
TZ380	8.2.0-8009	NSa 6800	8.2.0-8009
TZ380W	8.2.0-8009
TZ480	8.2.0-8009
TZ580	8.2.0-8009
TZ680	8.2.0-8009

Deprecation Notice

Support for customizing guest login pages using external web servers with the CGI mechanism has been deprecated. This functionality will no longer be enhanced, and customers are advised to migrate to the supported API‑based guest login customization mechanism.

For migration guidance and additional details, refer to the following Knowledge Base article: Deprecation of CGI-Based Guest Login Page Customization.

What's New

• Credential Auditor

  SonicOS 8.2.0 supports Credential Auditor, a built-in security feature designed to strengthen password protection. It automatically checks user credentials against known lists of compromised passwords, flags any matches, and enables administrators to take immediate action such as issuing warnings or enforcing password changes. This capability is included at no additional cost, with no extra SKUs or products required. Credential Auditor provides customers and partners with a simple, proactive way to manage credential risks, further enhancing SonicWall’s integrated, easy-to-use.

• Enhanced Security Default

  Updated OpenSSH library to the latest stable version.

• Simplified Support and Troubleshooting
  • Download all logs and diagnostics with a single click from the Diagnostics page for faster support resolution
  • Dashboard text field for description enhancement for reliable appliance identification.

• Improved Signature Download Security

  Signature downloads via proxy now use HTTPS (port 443), ensuring the secure transmission of update files in proxy environments.

• Cloud Secure Edge (CSE) Improvements
  • Support for publishing routes outside the RFC1918 range to allow connections to any private resource through the firewall.
  • Support for more than 100 firewalls connecting to the same CSE organization.

• Support for Bearer Token Validation for Non‑GUI API Sessions

  The Two‑Factor and Bearer Token Authentication option has been renamed to Non‑GUI Management Login Bearer Token Session Check.

  This security option introduces bearer token validation for non‑GUI (API‑only) sessions, enhancing authentication control for API access.

  Key Details:

  • This option is turned off by default, including after a factory reset.
  • When enabled, the firewall issues a bearer token in the /auth API response.
  • All subsequent non‑GUI API requests must include this bearer token in the request header for authentication.

  For more information and configuration details, refer to the following Knowledge Base article: Support for Bearer Token Validation for Non GUI API Sessions.

This maintenance release also resolves previously reported issues.

• SonicOS 8.2.0 supports the TZ80, TZ280, TZ280P, TZ280W TZ380, TZ380W, TZ480, TZ580, TZ680, NSa 2800, NSa 3800, NSa 4800, NSa 5800, and NSa 6800.
• SonicOS 8.2.0 includes in-product migration, where you can import settings from your:
  • SonicOS Gen 6/6.5 devices to your new SonicOS Gen 8 devices.
  • SonicWall SOHO/SOHOW security appliance to your new SonicWall TZ80.
  • SonicWall TZ270 security appliance to your new SonicWall TZ280.
  • SonicWall TZ570P security appliance to your new SonicWall TZ280P.
  • SonicWall TZ270W security appliance to your new SonicWall TZ280W.
  • SonicWall TZ370 security appliance to your new SonicWall TZ380.
  • SonicWall TZ370W security appliance to your new SonicWall TZ380W.
  • SonicWall TZ470 security appliance to your new SonicWall TZ480.
  • SonicWall TZ570 security appliance to your new SonicWall TZ580.
  • SonicWall TZ670 security appliance to your new SonicWall TZ680
  • SonicWall NSa 2600 or NSa 2700 security appliance to your new NSa 2800.
  • SonicWall NSa 3600 or NSa 3700 security appliance to your new NSa 3800.
  • SonicWall NSa 4600 or NSa 4700 security appliance to your new NSa 4800.
  • SonicWall NSa 5600 or NSa 5700 security appliance to your new NSa 5800.
  • SonicWall NSa 6600 or NSa 6700 security appliance to your new NSa 6800.

  For more information, refer to the SonicOS 8 Migration Requirements Reference Guide.

Additional References

Not Applicable.