SonicWall™ SonicOS 5.9.1

1 sonicwall SonicOS Notes1 sonicwall SonicOS NotesMarch 2017 These release notes provide information about the sonicwall SonicOS : About SonicOS New Features Supported Platforms Resolved Issues Known Issues System Compatibility Product licensing Upgrading information sonicwall SupportAbout SonicOS provides all the features that were included in previous releases of SonicOS and is a unified web post release with support for Gen5 platforms and SOHO. It includes resolution for several critical customer escalations, which are listed in the Resolved Issues section, and removes weak ciphers. Additionally, SonicPoint firmware has been updated and RADIUS Accounting is being introduced.

2 Refer to New Features for information. End user product and licensing information has been added to the more information about other releases, see the previous release notes, available on MySonicWall at: On sonicwall TZ series and some smaller NSA series platforms such as the NSA 220, performance may be affected after upgrading to SonicOS This is due to the large number of features, enhancements, and vulnerability fixes provided in SonicOS compared to the SonicOS releases. These features and updates are essential to improving your network SonicOS Notes2 New FeaturesNew features were added to SonicOS for in this release.

3 New features and enhancements include: Updated SonicPoint Firmware SonicPoint Radius Accounting EUPAU pdated SonicPoint FirmwareNew sonicwall branded firmware version 10 is available for SonicPoint devices connected to appliances running SonicOS Supported platforms are: SonicPoint ACe SonicPoint ACi SonicPoint N2 Your SonicPoint is automatically provisioned with the new firmware by Radius AccountingSonicOS introduces support for Radius Accounting on sonicwall firewalls with a connected SonicPoint ACe, ACi, or N2, in the scope of IEEE Enterprise Accounting uses the RADIUS protocol to deliver accounting information from a Network Access Server (NAS, a SonicPoint in our case) to the Radius Accounting Server (RAS).

4 The SonicOS administrator can use the accounting information to apply various billing rules on the Radius Accounting server side, based on session duration or traffic load being transferred for each individual user. Radius Accounting is the process of collecting and storing the information contained in the following system messages: Accounting Start Accounting StopEUPAThe firmware has been updated to show the End User Product Agreement (EUPA). The command appears in the left hand navigation under System > Legal Information. Select it to view the details of the SonicOS Notes3 Supported PlatformsThe SonicOS release is supported on the following sonicwall network security platforms:See the tables in the following sections for supported feature information.

5 Supported key features by platform Supported SonicPoint and wireless features by platform Supported/unsupported IPv6 featuresSupported Key Features by PlatformThe following table lists the key features in SonicOS and shows which appliance series supports E8510 NSA 2400TZ 215TZ 215 WirelessNSA E8500 NSA 2400 MXTZ 210TZ 210 WirelessNSA E7500 NSA 250 MTZ 205TZ 205 WirelessNSA E6500 NSA 250M WirelessTZ 200TZ 200 WirelessNSA E5500 NSA 240TZ 105TZ 105 WirelessNSA E5000 NSA 220TZ 100TZ 100 WirelessNSA 4500 NSA 22 wirelessSOHONSA 3500 Feature / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesActive Active ClusteringYNNNNNNNNA mazon VPC1 YYYYYYYYYApp Rules EnhancementYYYYYNYNYAppFlow ReportsYYYYNNNNNArcSight Syslog Format SupportYYYYYNYNYB andwidth Management EnhancementYYYYYYYYYBGP Advanced RoutingYY2Y3 NNNNNNCLI Enhancements4 YYYYYYYYYC lient CFS EnforcementYYYYYYYYYC ommon Access Card SupportYYYYYYYYYG uest Admin SupportYYYYYNYNYS onicWall SonicOS Notes4 IKE Dead Peer DetectionYYYYYYYYYIKEv2 Configuration Payload SupportYYYYYYYYYIPv6 YYYYYNYNYIPv6 6rdYYYYYNYNYIPv6 BGPYYYYYNYNYIPv6 DHCP PDYYYYYNYNYIPv6 for Backend ServersYYYYYNYNYLDAP User Group MonitoringYYYYYYYYYLDAP

6 User Group MonitoringYYYYYYYYYLog Monitor Filter Input BoxYYYYYYYYYL ogging EnhancementYYYYYYYYYMOBIKEYYYYYNYNYNetEx tender WXAC IntegrationYYYYYYYYYN etwork Device Protection Profile (NDPP Mode)YYYYYYYYYN umbered Tunnel Interfaces for Route Based VPNYY5 NNNNNNNOne Touch Configuration OverridesYYYYYNYNYOpenSSH Vulnerability Security EnhancementsYYYYYYYYYPath MTU DiscoveryYYYYYYYYYF eature / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesSonicWall SonicOS Notes5 Proxied Users Identification and LoginYYYYYYYYYR eassembly Free Regular Expression for DPI EngineYYYYYNYNYSHA 2 in IPsecYYYYYYYYYSNMPv3 YYYYYYYYYSSL VPN Mobile Connect BookmarkYYYYYYYYYSSL VPN Multi Core ScalabilityYYYNYNNNYSSO RADIUS AccountingYY6 NNNNNNNTSR

7 EnhancementsYYYYYYYYYUDP/ICMP Flood ProtectionYYYYYNYNYWire Mode 4G SupportYYYYYYYNYXD Lookup for Access VPC VPN connection using static routing is supported for all platforms. Amazon VPC VPN connection using dynamic rout ed is supported only on platforms that support supported on NSA 240. NSA 250M series and NSA 220 series require a license for a CLI command set is supported on NSA 240 and all TZ only on NSA 250M and higher models; not supported on NSA only on NSA 3500 and higher only on NSA 3500 and higher / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesSonicWall SonicOS Notes6 Supported SonicPoint and Wireless Features by PlatformThe following table lists the SonicPoint and wireless features in SonicOS and shows which appliance series supports / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesExternal Guest Service Apache / PHP SupportYYYYYYYYYE xternal Guides Service FQDN

8 SupportYYYYYYYYYG uest Admin SupportYYYYYNYNYI nternal Radio IDS Scan Scheduling1 NYYYYYYYYS onicPoint (WMM) OoSYYYYYYYYYS onicPoint Auto ProvisioningYYYYYYYYYS onicPoint Retain Custom ConfigurationYYYYYYYYYS onicPoint DFS SupportYYYYYYYYYS onicPoint Diagnostics EnhancementYYYYYYYYYS onicPoint FairNet SupportYYYYYYYYYS onicPoint RADIUS Server FailoverYYYYYYYYYSoniPoint WPA TKIP Countermeasures and MIC Failure Flooding Detection and ProtectonYYYYYYYYYS onicPoint Layer 3 ManagementYY2 YNNNNNNT raffic Quota Based Guest Svc PolicyYYYYYYYYYS onicWall SonicOS Notes7 Supported and Unsupported IPv6 FeaturesThe table in this section summarizes the key SonicOS features that support see which appliance platforms support IPv6.

9 Refer to the section about Supported SonicPoint and Wireless Features by Access Point ACL SupportYYYYYYYYYV irtual Access Point ACL SupportYYYYYYYYYV irtual Access Point SchedulingYYYYYYYYYW ireless Client Bridge Support3 NYYYYYYYYW ireless PCI Rogue Detect PreventionYYYYYYYYYW ireless Radio Built In Scan supported on platforms with internal wireless supported on NSA Supported on platforms with internal wireless Supported on platforms with internal wireless Available with IPv6 Features Not Available with IPv6 6to4 tunnel (allows IPv6 nodes to connect to outside IPv6 services over an IPv4 network) Access Rules Address Objects Anti Spyware Application Firewall Attack prevention: Land Attack Ping of Death Smurf SYN Flood Connection Cache Connection Limiting for IPv6 connections Connection Monitor Content Filtering Service DHCP DNS client Anti Spam Command Line Interface DHCP over VPN DHCP Relay Dynamic Address Objects for IPv6 addresses Dynamic DNS FQDN Global VPN Client (GVC) GMS High Availability.

10 Multicast Oracle SQL/Net RTSP VoIP IKEv1 IPv6 Syslog messages L2 TPFeature / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesSonicWall SonicOS Notes8 DNS lookup and reverse name lookup Dynamic Routing (RIPng and OSPFv3) EPRT EPSV FTP Gateway Anti Virus High Availability: Connection Cache FTP IPv6 management IP address NDP SonicPoint HTTP/HTTPS management over IPv6 ICMP IKEv2 Intrusion Prevention Service IP Spoof Protection IPv4 Syslog messages, including messages with IPv6 addresses IPv6 BGP IPv6 for Backend Servers Layer 2 Bridge Mode Logging IPv6 events Login uniqueness Multicast Routing with Multicast Listener Discovery NAT NAT load balancing Neighbor Discovery Protocol NetExtender connections for users with IPv6 addresses Packet Capture Ping Policy Based Routing PPPoE Remote management Security services for IPv6 traffic with DPI Site to site IPv6 tunnel with IPsec for security SonicPoint IPv6 support SNMP SSL VPN Stateful inspection of IPv6 traffic User status Visualization LDAP MAC IP Anti Spoof NAT between IPv6 and IPv4 addresses NAT High Availability probing