SonicWall® SonicOS 6.5 Upgrade GuideMay 2019

This Upgrade Guide provides instructions for upgrading your SonicWall® network security appliance from previous versions of SonicOS to the latest version of SonicOS 6.5.

This guide also provides information about importing the configuration settings from an appliance running SonicOS 5.8, 5.9, 6.1, 6.2, or 6.5 to an appliance running SonicOS 6.5. See Importing Configuration Settings for details about the platforms and firmware versions supported.

Topics:

• Obtaining the Latest SonicOS Firmware

• Creating a System Backup and Exporting Your Settings

• Upgrading Firmware with Current Settings

• Upgrading Firmware with Factory Default Settings

• Using SafeMode to Upgrade Firmware

• Importing Configuration Settings

• SonicWall Support

Obtaining the Latest SonicOS FirmwareTo obtain a new SonicOS firmware image file for your SonicWall security appliance:

1 In a browser on your management computer, log into your MySonicWall account at https://www.mysonicwall.com/.

2 In MySonicWall, navigate to Product Management > My Products in the left navigation pane to display the list of your registered appliances.

3 Mouse over the row that displays your appliance model. Options appear at the right side of the row.

4 Click the Firmware icon.

5 Click the Browse All Firmware button to display all available firmware versions.

SonicWall SonicOS 6.5Upgrade Guide

1

6 Mouse over the row for the firmware you want. Options appear at the right.

7 Click the Download icon to download the firmware to your computer, and click the PDF icon to display the Release Notes.

Creating a System Backup and Exporting Your SettingsBefore beginning the update process, make a system backup on your SonicWall appliance. When you click the Create Backup button, the SonicWall security appliance takes a “snapshot” of your current system state, firmware and configuration preferences, and makes the snapshot the new System Backup firmware image. You can save Backups locally or on the cloud. You can also schedule backups to occur automatically. Clicking Create Backup overwrites the existing Backup firmware image as necessary.

• On SonicWall NSa, NSA, and SuperMassive 9000 series appliances, the backup feature saves a copy of the current system state, firmware, and configuration settings on your appliance, protecting all your existing settings in the event that it becomes necessary to return to a previous configuration state.

• On SonicWall TZ series, SOHO 250/250W, and SOHO Wireless appliances, you can create a backup of your current configuration settings on the appliance, to be used with the current firmware version or with a newly uploaded firmware version.

You can also export the appliance configuration settings to a file on your local management station. This file serves as an external backup of the configuration settings, and can be imported into another appliance or into the same appliance if it is necessary to reboot the firmware with factory default settings.

To save a system backup and export configuration settings to a file on your local management station:

1 In the MANAGE view, on the Updates | Firmware & Backups page, click the Create Backup drop-down list and select one of the following:

• Select Local Backup. On an NSa, NSA, or SuperMassive appliance, SonicOS takes a “snapshot” of your current system state, firmware, and configuration preferences, and makes it the new local backup firmware image. Clicking Local Backup overwrites the existing local backup image, if any. The Local Backup Firmware Version entry is displayed in the Firmware Management table.

On a TZ, SOHO 250/250W, or SOHO Wireless appliance, SonicOS saves a small file on the appliance with all your configuration settings. Any previous backup settings file is overwritten. The Boot drop-down list displays the Boot Current Firmware with Local Backup Configuration selection, which shows the firmware version of the backup.

• Select Cloud Backup. In the popup dialog, optionally select Retain Cloud Backup to prevent this backup from being overwritten by a future cloud backup. Optionally enter a comment in the Comment field. Click Upload.

2 To export your settings to a local file, click the Import/Export Configuration drop-down list and select Export Configuration. In the popup dialog, which displays the name of the saved file, click Export to complete the process.

SonicWall SonicOS 6.5Upgrade Guide

2

Upgrading Firmware with Current SettingsYou can update the SonicOS image on a SonicWall security appliance remotely if the LAN or WAN interface is configured for management access. On SonicWall NSa, NSA, or SuperMassive platforms, you can also connect directly to the MGMT port and point your browser to that IP address (http://192.168.1.254 by default) to log in and perform the upgrade.

To upload new firmware to your SonicWall appliance and use your current configuration settings upon startup:

1 Download the SonicOS firmware image file from MySonicWall and save it to a location on your local computer.

2 Point your browser to the appliance IP address, and log in as an administrator.

3 In the MANAGE view, on the Updates | Firmware & Backups page, click Upload Firmware.

4 Browse to the location where you saved the SonicOS firmware image file, select the file, and click Upload. After the firmware finishes uploading, it is displayed in the Firmware Management table.

5 On the Firmware & Backups page, click the Boot drop-down list in the row for Uploaded Firmware Version and select Boot Uploaded Firmware with Current Configuration.

6 In the confirmation dialog box, click OK. The appliance restarts and displays the login page.

7 Enter your user name and password. Your new SonicOS image version information is displayed in the MONITOR view on the System > Status page.

Upgrading Firmware with Factory Default SettingsTo upload new firmware to your SonicWall appliance and start it up using the default configuration:

1 Download the SonicOS firmware image file from MySonicWall and save it to a location on your local computer.

2 Point your browser to the appliance IP address, and log in as an administrator.

3 In the MANAGE view, on the Updates | Firmware & Backups page, use Create Backup to create a local or cloud backup.

Wait for the backup to complete.

4 Click Upload Firmware.

5 Browse to the location where you saved the SonicOS firmware image file, select the file, and click Upload.

6 On the Firmware & Backups page, click the Boot drop-down list in the row for Uploaded Firmware Version and select Boot Uploaded Firmware with Factory Default Configuration.

7 In the confirmation dialog box, click OK. The appliance restarts and then displays the options to launch the Setup Wizard or go to the login page of the SonicOS management interface.

SonicWall SonicOS 6.5Upgrade Guide

3

8 Enter the default user name and password (admin/password) to access the SonicOS management interface.

Using SafeMode to Upgrade FirmwareIf you are unable to connect to the SonicOS management interface, you can restart the SonicWall security appliance in SafeMode. The SafeMode feature allows you to quickly recover from uncertain configuration states with a simplified management interface that includes the same settings available in the legacy SonicOS System > Settings page.

SafeMode is supported on the following platforms:

The SafeMode procedure uses a recessed reset button in a small pinhole:

• On the SuperMassive and most NSA models, the button is near the USB ports on the front.

• On NSa platforms, the reset button is near the X0 port and above the power button on the front.

• On the TZ and SOHO models, the button is next to the power connection on the back.

To use SafeMode to upgrade firmware on a SonicWall security appliance:

1 Do one of the following:

• On a SonicWall TZ, SOHO 250/250W, or SOHO Wireless appliance, connect your computer to the X0 port on the appliance and configure your computer with an IP address on the 192.168.168.0/24 subnet, such as 192.168.168.20.

• On a SonicWall NSa, NSA, or SuperMassive appliance, connect your computer to the MGMT port on the appliance and configure your computer with an IP address on the 192.168.1.0/24 subnet, such as 192.168.1.20.

2 Use a narrow, straight object, like a straightened paper clip or a toothpick, to press and hold the SafeMode button on the security appliance for approximately 20-60 seconds.

The Test LED starts blinking when the appliance has rebooted into SafeMode.

NOTE: The IP address for the X0 (LAN) interface reverts to the default, 192.168.168.168. You can log into SonicOS by connecting to X0 and pointing your browser to https://192.168.168.168. On SonicWall NSa, NSA, or SuperMassive platforms, you can also log in by connecting to the MGMT port and pointing your browser to http://192.168.1.254.

SuperMassive NSa NSA TZ SOHO

9200 2650 2600 TZ300/TZ300W/TZ300P SOHO W

9400 3650 3600 TZ350/TZ350W SOHO 250

9600 4650 4600 TZ400/TZ400W SOHO 250W

5650 5600 TZ500/TZ500W

6650 6600 TZ600/TZ600P

9250

9450

9650

NOTE: On NSa 9250/9450/9650 platforms, you can use the LCD control buttons on the front panel to put the appliance into SafeMode.

SonicWall SonicOS 6.5Upgrade Guide

4

3 Do one of the following to access the SafeMode management interface:

• On a SonicWall TZ, SOHO 250/250W, or SOHO Wireless appliance, point your browser to http://192.168.168.168.

• On a SonicWall NSa, NSA, or SuperMassive appliance, point your browser to http://192.168.1.254.

4 Click Upload New Firmware, and then browse to the location where you saved the SonicOS firmware image, select the file, and click Upload.

5 Click the Boot drop-down list in the row for Uploaded Firmware Version and select one of the following:

• Uploaded Firmware – New!

Use this option to restart the appliance with your current configuration settings.

• Uploaded Firmware with Factory Default Settings – New!

Use this option to restart the appliance with factory default configuration settings.

SonicWall SonicOS 6.5Upgrade Guide

5

• Uploaded Firmware with Backup Settings – New!

Use this option to restart the appliance with the backup configuration settings.

6 In the confirmation dialog box, click OK to proceed.

7 After successfully booting the firmware, the login screen is displayed. If you booted with factory default settings, enter the default user name and password (admin / password) to access the SonicOS management interface.

On a SonicWall NSa, NSA, or SuperMassive appliance, you can continue to manage the appliance from the MGMT interface at 192.168.1.254.

On all SonicWall platforms, you can manage the appliance from the X0 interface or another LAN interface, or from the WAN interface, if configured. The default IP address of the X0 interface is 192.168.168.168.

8 To manage the appliance from an interface other than the one to which your computer is physically connected:

a Disconnect your computer from the appliance.

b Reconfigure the computer to automatically obtain an IP address and DNS server address, or reset it to its normal static values.

c Connect the computer to your network or to the desired interface on the appliance.

If the appliance is managed from any interface other than the default LAN (X0) and the computer used to manage the appliance is set to automatically obtain an IP address and DNS server, a static or dynamic DHCP lease scope must be configured in SonicOS for that interface.

d Point your browser to the appropriate WAN or LAN IP address of the appliance.

SonicWall SonicOS 6.5Upgrade Guide

6

Importing Configuration SettingsYou can import configuration settings from one appliance to another, which can save a lot of time when replacing an older appliance with a newer model. This feature is also useful when you need multiple appliances with similar configuration settings.

To export the configuration settings from an appliance, navigate to the MANAGE | Updates | Firmware & Backups page in SonicOS, click the Import/Export Configuration drop-down list and select Export Configuration. In the popup dialog, click Export to complete the process. You can then import the settings file to another appliance by selecting Import Configuration from the Import/Export Configuration drop-down list.

The following sections provide details about which firmware versions or which models support importing configuration settings to other models and firmware versions for 5.8, 5.9, 6.1, 6.2, or 6.5:

• About Settings Import

• Configuration Settings Import Support by Version

• Configuration Settings Import Support by Platform

About Settings ImportImporting configuration settings, or preferences (“prefs”), to SonicWall network security appliances running SonicOS 6.5 is generally supported from the following SonicWall appliances running 5.8, 5.9, 6.1, 6.2, or 6.5:

• NSa 2650/3650/4650/5650/6650/9250/9450/9650 (Gen 6.5)

• SuperMassive 9200/9400/9600 (Gen 6)

• NSA 2600/3600/4600/5600/6600 (Gen 6)

• TZ350/TZ350W (Gen 6.5)

• TZ300P, TZ600P (Gen 6.5)

• TZ300/TZ300W, TZ400/TZ400W, TZ500/TZ500W, TZ600 (Gen 6)

• SOHO 250 / SOHO 250W (Gen 6.5)

• SOHO/SOHO W (Gen 6)

• NSA E5500/E6500/E7500/E8500/E8510 (Gen 5)

• NSA 2400/3500/4500/5000, NSA 220/220W, NSA 250M/250MW (Gen 5)

• TZ 100/105/200/205/210/215 (Gen 5)

• TZ 100W/105W/200W/205W/210W/215W (Gen 5)

SonicWall SonicOS 6.5Upgrade Guide

7

Configuration Settings Import Support by VersionThe following table illustrates the supported source and destination versions of SonicOS when importing configuration settings from one appliance to another.

Configuration Settings Import Support by PlatformThe tables in the following sections show the SonicWall firewalls whose configuration settings can be imported to SonicWall platforms running SonicOS 6.5. The source firewalls are in the left column, and the destination firewalls are listed across the top.

The legend for these tables is:

See the following sections:

• TZ Series / SOHO Series Configuration Import Support

• NSA / SuperMassive Configuration Import Support

• NSa Configuration Import Support

SonicWall SonicOS 6.5Upgrade Guide

8

TZ Series / SOHO Series Configuration Import Support

SonicWall SonicOS 6.5Upgrade Guide

9

NSA / SuperMassive Configuration Import Support

SonicWall SonicOS 6.5Upgrade Guide

10

NSa Configuration Import Support

SonicWall SonicOS 6.5Upgrade Guide

11

SonicWall SupportTechnical support is available to customers who have purchased SonicWall products with a valid maintenance contract and to customers who have trial versions.

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. To access the Support Portal, go to https://www.sonicwall.com/support.

The Support Portal enables you to:

• View knowledge base articles and technical documentation

• View video tutorials

• Access MySonicWall

• Learn about SonicWall professional services

• Review SonicWall Support services and warranty information

• Register for training and certification

• Request technical support or customer service

To contact SonicWall Support, visit https://www.sonicwall.com/support/contact-support.

SonicWall SonicOS 6.5Upgrade Guide

12

Copyright © 2019 SonicWall Inc. All rights reserved.

This product is protected by U.S. and international copyright and intellectual property laws. SonicWall is a trademark or registered trademark of SonicWall Inc. and/or its affiliates in the U.S.A. and/or other countries. All other trademarks and registered trademarks are property of their respective owners.

The information in this document is provided in connection with SonicWall Inc. and/or its affiliates' products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of SonicWall products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, SONICWALL AND/OR ITS AFFILIATES ASSUME NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL SONICWALL AND/OR ITS AFFILIATES BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF SONICWALL AND/OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SonicWall and/or its affiliates make no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserve the right to make changes to specifications and product descriptions at any time without notice. SonicWall Inc. and/or its affiliates do not make any commitment to update the information contained in this document.

For more information, visit https://www.sonicwall.com/legal.

To view the SonicWall End User Product Agreement, go to: https://www.sonicwall.com/legal/eupa.

Last updated: 5/6/19

232-003196-04 Rev B

Legend

WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.

CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.

IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

SonicWall SonicOS 6.5Upgrade Guide

13