SonicWall™ SonicOS 5.9.1

1 sonicwall SonicOS Notes1 sonicwall SonicOS NotesOctober 2017 These release notes provide information about the sonicwall SonicOS : About SonicOS Supported Platforms Resolved Issues Known Issues System Compatibility Product licensing Upgrading information sonicwall SupportAbout SonicOS SonicOS is a maintenance release that enhances protection against the KRACK vulnerability. sonicwall TZ and SOHO wireless firewalls, as well as sonicwall wireless access points, are not vulnerable to KRACK. However, since a compromised client might communicate to the access point or firewall, an additional layer of protection was added to block such communications.

2 This keeps the communication safe for all wireless clients. Upgrading to this release is recommended to fully mitigate all provides all the features that were included in previous releases of SonicOS and is a unified web post release with support for Gen5 platforms and SOHO. For more information about other releases, see the previous release notes, available on MySonicWall at: Supported PlatformsThe SonicOS release is supported on the following sonicwall network security platforms:On sonicwall TZ series and some smaller NSA series platforms such as the NSA 220, performance may be affected after upgrading to SonicOS This is due to the large number of features, enhancements, and vulnerability fixes provided in SonicOS compared to the SonicOS releases.

3 These features and updates are essential to improving your network E8510 NSA 2400TZ 215TZ 215 WirelessNSA E8500 NSA 2400 MXTZ 210TZ 210 WirelessSonicWall SonicOS Notes2 See the tables in the following sections for supported feature information: Supported key features by platform Supported SonicPoint and wireless features by platform Supported/unsupported IPv6 featuresSupported Key Features by PlatformThe following table lists the key features in SonicOS and shows which appliance series supports E7500 NSA 250 MTZ 205TZ 205 WirelessNSA E6500 NSA 250M WirelessTZ 200TZ 200 WirelessNSA E5500 NSA 240TZ 105TZ 105 WirelessNSA E5000 NSA 220TZ 100TZ 100 WirelessNSA 4500 NSA 220 wirelessSOHONSA 3500 Feature / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200

4 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesActive Active ClusteringYNNNNNNNNA mazon VPC1 YYYYYYYYYApp Rules EnhancementYYYYYNYNYAppFlow ReportsYYYYNNNNNArcSight Syslog Format SupportYYYYYNYNYB andwidth Management EnhancementYYYYYYYYYBGP Advanced RoutingYY2Y3 NNNNNNCLI Enhancements4 YYYYYYYYYC lient CFS EnforcementYYYYYYYYYC ommon Access Card SupportYYYYYYYYYG uest Admin SupportYYYYYNYNYIKE Dead Peer DetectionYYYYYYYYYIKEv2 Configuration Payload SupportYYYYYYYYYS onicWall SonicOS Notes3 IPv6 YYYYYNYNYIPv6 6rdYYYYYNYNYIPv6 BGPYYYYYNYNYIPv6 DHCP PDYYYYYNYNYIPv6 for Backend ServersYYYYYNYNYLDAP User Group MonitoringYYYYYYYYYLDAP User Group MonitoringYYYYYYYYYLog Monitor Filter Input BoxYYYYYYYYYL ogging EnhancementYYYYYYYYYMOBIKEYYYYYNYNYNetEx tender WXAC IntegrationYYYYYYYYYN etwork Device Protection Profile (NDPP Mode)

5 YYYYYYYYYN umbered Tunnel Interfaces for Route Based VPNYY5 NNNNNNNOne Touch Configuration OverridesYYYYYNYNYOpenSSH Vulnerability Security EnhancementsYYYYYYYYYPath MTU DiscoveryYYYYYYYYYP roxied Users Identification and LoginYYYYYYYYYR eassembly Free Regular Expression for DPI EngineYYYYYNYNYSHA 2 in IPsecYYYYYYYYYF eature / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesSonicWall SonicOS Notes4 SNMPv3 YYYYYYYYYSSL VPN Mobile Connect BookmarkYYYYYYYYYSSL VPN Multi Core ScalabilityYYYNYNNNYSSO RADIUS AccountingYY6 NNNNNNNTSR EnhancementsYYYYYYYYYUDP/ICMP Flood ProtectionYYYYYNYNYWire Mode 4G SupportYYYYYYYNYXD Lookup for Access VPC VPN connection using static routing is supported for all platforms.

6 Amazon VPC VPN connection using dynamic rout ed is supported only on platforms that support supported on NSA 240. NSA 250M series and NSA 220 series require a license for a CLI command set is supported on NSA 240 and all TZ only on NSA 250M and higher models; not supported on NSA only on NSA 3500 and higher only on NSA 3500 and higher / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesSonicWall SonicOS Notes5 Supported SonicPoint and Wireless Features by PlatformThe following table lists the SonicPoint and wireless features in SonicOS and shows which appliance series supports / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesExternal Guest

7 Service Apache / PHP SupportYYYYYYYYYE xternal Guides Service FQDN SupportYYYYYYYYYG uest Admin SupportYYYYYNYNYI nternal Radio IDS Scan Scheduling1 NYYYYYYYYS onicPoint (WMM) OoSYYYYYYYYYS onicPoint Auto ProvisioningYYYYYYYYYS onicPoint Retain Custom ConfigurationYYYYYYYYYS onicPoint DFS SupportYYYYYYYYYS onicPoint Diagnostics EnhancementYYYYYYYYYS onicPoint FairNet SupportYYYYYYYYYS onicPoint RADIUS Server FailoverYYYYYYYYYSoniPoint WPA TKIP Countermeasures and MIC Failure Flooding Detection and ProtectonYYYYYYYYYS onicPoint Layer 3 ManagementYY2 YNNNNNNT raffic Quota Based Guest Svc PolicyYYYYYYYYYS onicWall SonicOS Notes6 Supported and Unsupported IPv6 FeaturesThe table in this section summarizes the key SonicOS

8 Features that support see which appliance platforms support IPv6, refer to the section about Supported SonicPoint and Wireless Features by Access Point ACL SupportYYYYYYYYYV irtual Access Point ACL SupportYYYYYYYYYV irtual Access Point SchedulingYYYYYYYYYW ireless Client Bridge Support3 NYYYYYYYYW ireless PCI Rogue Detect PreventionYYYYYYYYYW ireless Radio Built In Scan supported on platforms with internal wireless supported on NSA Supported on platforms with internal wireless Supported on platforms with internal wireless Available with IPv6 Features Not Available with IPv6 6to4 tunnel (allows IPv6 nodes)

9 To connect to outside IPv6 services over an IPv4 network) Access Rules Address Objects Anti Spyware Application Firewall Attack prevention: Land Attack Ping of Death Smurf SYN Flood Connection Cache Connection Limiting for IPv6 connections Connection Monitor Content Filtering Service DHCP DNS client Anti Spam Command Line Interface DHCP over VPN DHCP Relay Dynamic Address Objects for IPv6 addresses Dynamic DNS FQDN Global VPN Client (GVC) GMS High Availability: Multicast Oracle SQL/Net RTSP VoIP IKEv1 IPv6 Syslog messages L2 TPFeature / EnhancementNSA E Class SeriesNSA SeriesTZ 215 SeriesTZ 210 SeriesTZ 205 SeriesTZ 200 SeriesTZ 105 SeriesTZ 100 SeriesSOHO SeriesSonicWall SonicOS Notes7 DNS lookup and reverse name lookup Dynamic Routing (RIPng and OSPFv3) EPRT EPSV FTP Gateway Anti Virus High Availability.

10 Connection Cache FTP IPv6 management IP address NDP SonicPoint HTTP/HTTPS management over IPv6 ICMP IKEv2 Intrusion Prevention Service IP Spoof Protection IPv4 Syslog messages, including messages with IPv6 addresses IPv6 BGP IPv6 for Backend Servers Layer 2 Bridge Mode Logging IPv6 events Login uniqueness Multicast Routing with Multicast Listener Discovery NAT NAT load balancing Neighbor Discovery Protocol NetExtender connections for users with IPv6 addresses Packet Capture Ping Policy Based Routing PPPoE Remote management Security services for IPv6 traffic with DPI Site to site IPv6 tunnel with IPsec for security SonicPoint IPv6 support SNMP SSL VPN Stateful inspection of IPv6 traffic User status Visualization LDAP MAC IP