Version 8.2.2-8015

August 2026

Compatibility and Installation Notes

• Most popular browsers are supported, but Google Chrome is preferred for the real-time graphics display on the Dashboard.
• A MySonicWall account is required.

The platform-specific version for this unified release is the same:

TZ Series	Firmware Version	NSa Series	Firmware Version	NSv Series	Firmware Version
TZ80	8.2.2-8015	NSa 2800	8.2.2-8015	NSv XS	8.2.2-8015
TZ280	8.2.2-8015	NSa 3800	8.2.2-8015	NSv S	8.2.2-8015
TZ280P	8.2.2-8015	NSa 4800	8.2.2-8015	NSv M	8.2.2-8015
TZ280W	8.2.2-8015	NSa 5800	8.2.2-8015	NSv L	8.2.2-8015
TZ380	8.2.2-8015	NSa 6800	8.2.2-8015
TZ380W	8.2.2-8015
TZ480	8.2.2-8015
TZ580	8.2.2-8015
TZ680	8.2.2-8015

Deprecation Notice

Support for customizing guest login pages using external web servers with the CGI mechanism has been deprecated. This functionality will no longer be enhanced, and customers are advised to migrate to the supported API‑based guest login customization mechanism.

For migration guidance and additional details, refer to the following Knowledge Base article: Deprecation of CGI-Based Guest Login Page Customization.

What's New

• Security Services Enabled by Default

  Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Botnet Filtering, and Geo-IP Filtering are automatically enabled on SonicOS 8 appliances at the point of registration, without requiring post-deployment configuration.

• Let's Encrypt Integration

  SonicOS 8.2.2 now supports the ACME v2 protocol for automated issuance, renewal, and installation of SSL/TLS certificates directly from the firewall.

  • Supports HTTP-01 domain validation.

  • Certificates are renewed automatically ahead of expiry.

  • Configurable from both the SonicOS management UI and CLI.

• Two-Factor Authentication for GVC

  TOTP-based two-factor authentication is now available for Global VPN Client (GVC) connections.

• Indicator of Compromise (IoC) – Hash Detection

  Administrators can import MD5, SHA-1, and SHA-256 hash lists from threat intelligence feeds (up to 500,000 entries). Files matching an imported hash are blocked in transit and logged for audit purposes.

• Non-Reversible Password Storage

  Stored credentials now use one-way cryptographic hashing (bcrypt) rather than a reversible format. Existing credentials are automatically migrated during the first login after the upgrade, and configuration exports no longer contain recoverable credentials. This feature is not enabled by default.

• SD-WAN Site Support Increase

  The maximum number of supported SD-WAN sites per SonicOS 8 appliance has increased, extending single-hub SD-WAN coverage for larger branch deployments.

• SonicOS UI/UX Improvements

  This release includes a consolidated set of usability improvements across rule and policy pages, App Control, VPN monitoring, and logging, aligned with updated NSM 4.3 terminology:

  • Redesigned change-notification banner, repositioned so it no longer blocks key workflow actions.

  • Standardized placement of Add, Edit, Delete, Move, and Clone controls across Access Rules, NAT Rules, Route Rules, DNS Rules, Content Filter Rules, and App Rules.

  • Create Another option added for NAT, Route, DNS, Content Filter, and App Rules.

  • App Control list now sorts by Category Name, then App Name, then Signature ID, with the selected category persisting across changes.

  • VPN tunnel status now updates in real time.

  • ACL/NAT live counters no longer force a full grid reload or lose the last-hit timestamp.

  • Log entries now link directly to the related App Control, IPS, or Anti-Spyware signature settings.

  • LLDP now supports both transmit (Tx) and receive (Rx).

  • The Network > System > Interfaces page supports ascending and descending sort, with sub-interfaces sorted within their parent.

• SonicOS 8 NSv Small / Medium / Large

  Three new SonicOS 8 NSv virtual firewall sizes are introduced: Small (2 vCPU / 2 GB), Medium (4 vCPU / 8 GB), and Large (8 vCPU / 16 GB), supporting VMware, KVM, Hyper-V, Proxmox, AWS, and Azure. The maximum supported number of groups per NSv instance has increased to 500.

• NSM Enhancements

  SonicOS 8.2.2 is a co-release with NSM 4.3, which includes the following firewall-side capabilities:

  • Source and destination MAC addresses are now captured for user-based system events, including sessions established via SSL VPN or GVC remote access clients.

  • Firewall audit log data can now be delivered to NSM as flow events via a new IPFIX template.

• User Management Enhancements

  Guest Wi-Fi now supports a branded captive portal experience with Acceptable Use Policy (AUP) enforcement. RADIUS attribute support has been extended for advanced identity provider and access management integrations.

• Platform Capacity Increases

  The following per-platform limits have been increased in this release:

  • TZ80: maximum concurrent SSL VPN users increased to 10.

  • NSv L Model: maximum supported groups increased to 500.

This release also resolves previously reported issues.

Additional References

GEN8-16053, GEN8-16192, GEN8-16222, GEN8-16270, GEN8-16281, GEN8-16357, GEN8-16382, GEN8-16406, GEN8-16424, GEN8-16446, GEN8-16605, GEN8-16608, GEN8-16615, GEN8-16625, GEN8-16650, GEN8-16707, GEN8-16865, GEN8-16916, GEN8-16970, GEN8-16997, GEN8-17149, GEN8-17256, GEN8-17493, GEN8-17546, GEN8-17734