SonicWall® SonicOS 6.
5 Upgrade
Guide
June 2018
This Upgrade Guide provides instructions for upgrading your SonicWall® network security appliance from
previous versions of SonicOS to the latest version of SonicOS 6.5.
This guide also provides information about importing the configuration settings from an appliance running
SonicOS 5.8, 5.9, 6.1, 6.2, or 6.5 to an appliance running SonicOS 6.5. See Importing Configuration Settings for
details about the platforms and firmware versions supported.
Topics:
• Obtaining the Latest SonicOS Firmware
• Creating a System Backup and Exporting Your Settings
• Upgrading Firmware with Current Settings
• Upgrading Firmware with Factory Default Settings
• Using SafeMode to Upgrade Firmware
• Importing Configuration Settings
• SonicWall Support
Obtaining the Latest SonicOS
Firmware
To obtain a new SonicOS firmware image file for your SonicWall security appliance:
1 In a browser on your management computer, log into your MySonicWall account at
https://www.mysonicwall.com/.
2 In MySonicWall, click Downloads in the left navigation pane to display the Download Center screen.
3 Select your product in the Software Type drop-down list to display available firmware versions.
4 To download the firmware to your computer, click the link for the firmware version you want. You can
also download the Release Notes in the same way.
SonicWall SonicOS 6.5 1
Upgrade Guide
Creating a System Backup and
Exporting Your Settings
Before beginning the update process, make a system backup on your SonicWall appliance. When you click the
Create Backup button, the SonicWall security appliance takes a “snapshot” of your current system state,
firmware and configuration preferences, and makes the snapshot the new System Backup firmware image. You
can save Backups locally or on the cloud. You can also schedule backups to occur automatically. Clicking Create
Backup overwrites the existing Backup firmware image as necessary.
• On SonicWall NSa, NSA, and SuperMassive 9000 series appliances, the backup feature saves a copy of
the current system state, firmware, and configuration settings on your appliance, protecting all your
existing settings in the event that it becomes necessary to return to a previous configuration state.
• On SonicWall TZ series and SOHO Wireless appliances, you can create a backup of your current
configuration settings on the appliance, to be used with the current firmware version or with a newly
uploaded firmware version.
You can also export the appliance configuration settings to a file on your local management station. This file
serves as an external backup of the configuration settings, and can be imported into another appliance or into
the same appliance if it is necessary to reboot the firmware with factory default settings.
To save a system backup and export configuration settings to a file on your local management station:
1 In the MANAGE view, on the Updates | Firmware & Backups page, click the Create Backup drop-down
list and select one of the following:
• Select Local Backup. On an NSa, NSA, or SuperMassive appliance, SonicOS takes a “snapshot” of
your current system state, firmware, and configuration preferences, and makes it the new local
backup firmware image. Clicking Local Backup overwrites the existing local backup image, if any.
The Local Backup Firmware Version entry is displayed in the Firmware Management table.
On a TZ or SOHO W appliance, SonicOS saves a small file on the appliance with all your
configuration settings. Any previous backup settings file is overwritten. The Boot drop-down list
displays the Boot Current Firmware with Local Backup Configuration selection, which shows the
firmware version of the backup.
• Select Cloud Backup. In the popup dialog, optionally select Retain Cloud Backup to prevent this
backup from being overwritten by a future cloud backup. Optionally enter a comment in the
Comment field. Click Upload.
2 To export your settings to a local file, click the Import/Export Configuration drop-down list and select
Export Configuration. In the popup dialog, which displays the name of the saved file, click Export to
complete the process.
Upgrading Firmware with Current
Settings
You can update the SonicOS image on a SonicWall security appliance remotely if the LAN or WAN interface is
configured for management access. On SonicWall NSa, NSA, or SuperMassive platforms, you can also connect
directly to the MGMT port and point your browser to that IP address (http://192.168.1.254 by default) to log in
and perform the upgrade.
SonicWall SonicOS 6.5 2
Upgrade Guide
To upload new firmware to your SonicWall appliance and use your current configuration settings upon
startup:
1 Download the SonicOS firmware image file from MySonicWall and save it to a location on your local
computer.
2 Point your browser to the appliance IP address, and log in as an administrator.
3 In the MANAGE view, on the Updates | Firmware & Backups page, click Upload Firmware.
4 Browse to the location where you saved the SonicOS firmware image file, select the file, and click
Upload. After the firmware finishes uploading, it is displayed in the Firmware Management table.
5 On the Firmware & Backups page, click the Boot drop-down list in the row for Uploaded Firmware
Version and select Boot Uploaded Firmware with Current Configuration.
6 In the confirmation dialog box, click OK. The appliance restarts and displays the login page.
7 Enter your user name and password. Your new SonicOS image version information is displayed in the
MONITOR view on the System > Status page.
Upgrading Firmware with Factory
Default Settings
To upload new firmware to your SonicWall appliance and start it up using the default configuration:
1 Download the SonicOS firmware image file from MySonicWall and save it to a location on your local
computer.
2 Point your browser to the appliance IP address, and log in as an administrator.
3 In the MANAGE view, on the Updates | Firmware & Backups page, use Create Backup to create a local or
cloud backup.
Wait for the backup to complete.
4 Click Upload Firmware.
5 Browse to the location where you saved the SonicOS firmware image file, select the file, and click
Upload.
6 On the Firmware & Backups page, click the Boot drop-down list in the row for Uploaded Firmware
Version and select Boot Uploaded Firmware with Factory Default Configuration.
7 In the confirmation dialog box, click OK. The appliance restarts and then displays the options to launch
the Setup Wizard or go to the login page of the SonicOS management interface.
NOTE: The IP address for the X0 (LAN) interface reverts to the default, 192.168.168.168. You can log into
SonicOS by connecting to X0 and pointing your browser to https://192.168.168.168. On SonicWall NSa,
NSA, or SuperMassive platforms, you can also log in by connecting to the MGMT port and pointing your
browser to http://192.168.1.254.
8 Enter the default user name and password (admin/password) to access the SonicOS management
interface.
SonicWall SonicOS 6.5 3
Upgrade Guide
Using SafeMode to Upgrade
Firmware
If you are unable to connect to the SonicOS management interface, you can restart the SonicWall security
appliance in SafeMode. The SafeMode feature allows you to quickly recover from uncertain configuration states
with a simplified management interface that includes the same settings available in the legacy SonicOS System >
Settings page.
SafeMode is supported on the following platforms:
SuperMassive NSa NSA TZ SOHO
9200 2650 2600 TZ300/TZ300W SOHO W
9400 3650 3600 TZ400/TZ400W
9600 4650 4600 TZ500/TZ500W
5650 5600 TZ600
6650 6600
9250
9450
9650
The SafeMode procedure uses a recessed reset button in a small pinhole:
• On the SuperMassive and most NSA models, the button is near the USB ports on the front.
• On NSa platforms, the reset button is near the X0 port and above the power button on the front.
• On the TZ and SOHO models, the button is next to the power connection on the back.
To use SafeMode to upgrade firmware on a SonicWall security appliance:
1 Do one of the following:
• On a SonicWall TZ or SOHO W appliance, connect your computer to the X0 port on the appliance
and configure your computer with an IP address on the 192.168.168.0/24 subnet, such as
192.168.168.20.
• On a SonicWall NSa, NSA, or SuperMassive appliance, connect your computer to the MGMT port
on the appliance and configure your computer with an IP address on the 192.168.1.0/24 subnet,
such as 192.168.1.20.
2 Use a narrow, straight object, like a straightened paper clip or a toothpick, to press and hold the
SafeMode button on the security appliance for approximately 20-60 seconds.
NOTE: On NSa 9250/9450/9650 platforms, you can use the LCD control buttons on the front panel
to put the appliance into SafeMode.
The Test LED starts blinking when the appliance has rebooted into SafeMode.
3 Do one of the following to access the SafeMode management interface:
• On a SonicWall TZ or SOHO W appliance, point your browser to http://192.168.168.168.
• On a SonicWall NSa, NSA, or SuperMassive appliance, point your browser to
http://192.168.1.254.
SonicWall SonicOS 6.5 4
Upgrade Guide
4 Click Upload New Firmware, and then browse to the location where you saved the SonicOS firmware
image, select the file, and click Upload.
5 Click the Boot drop-down list in the row for Uploaded Firmware Version and select one of the following:
• Uploaded Firmware – New!
Use this option to restart the appliance with your current configuration settings.
• Uploaded Firmware with Factory Default Settings – New!
Use this option to restart the appliance with factory default configuration settings.
6 In the confirmation dialog box, click OK to proceed.
7 After successfully booting the firmware, the login screen is displayed. If you booted with factory default
settings, enter the default user name and password (admin / password) to access the SonicOS
management interface.
SonicWall SonicOS 6.5 5
Upgrade Guide
On a SonicWall NSa, NSA, or SuperMassive appliance, you can continue to manage the appliance from
the MGMT interface at 192.168.1.254.
On all SonicWall platforms, you can manage the appliance from the X0 interface or another LAN
interface, or from the WAN interface, if configured. The default IP address of the X0 interface is
192.168.168.168.
8 To manage the appliance from an interface other than the one to which your computer is physically
connected:
a Disconnect your computer from the appliance.
b Reconfigure the computer to automatically obtain an IP address and DNS server address, or reset
it to its normal static values.
c Connect the computer to your network or to the desired interface on the appliance.
If the appliance is managed from any interface other than the default LAN (X0) and the computer
used to manage the appliance is set to automatically obtain an IP address and DNS server, a static
or dynamic DHCP lease scope must be configured in SonicOS for that interface.
d Point your browser to the appropriate WAN or LAN IP address of the appliance.
Importing Configuration Settings
You can import configuration settings from one appliance to another, which can save a lot of time when
replacing an older appliance with a newer model. This feature is also useful when you need multiple appliances
with similar configuration settings.
To export the configuration settings from an appliance, navigate to the MANAGE | Updates | Firmware &
Backups page in SonicOS, click the Import/Export Configuration drop-down list and select Export
Configuration. In the popup dialog, click Export to complete the process. You can then import the settings file to
another appliance by selecting Import Configuration from the Import/Export Configuration drop-down list.
The following sections provide details about which firmware versions or which models support importing
configuration settings to other models and firmware versions for 5.8, 5.9, 6.1, 6.2, or 6.5:
• About Settings Import
• SonicOS Versions Supporting Configuration Import
• Platform Configuration Import Support Tables
About Settings Import
Importing configuration settings, or preferences (“prefs”), to SonicWall network security appliances running
SonicOS 6.5 is generally supported from the following SonicWall appliances running 5.8, 5.9, 6.1, 6.2, or 6.5:
• NSa 2650/3650/4650/5650/6650/9250/9450/9650 (Gen 6.5)
• SuperMassive 9200/9400/9600 (Gen 6)
• NSA 2600/3600/4600/5600/6600 (Gen 6)
• TZ300/TZ300 W, TZ400/TZ400 W, TZ500/TZ500 W, TZ600 (Gen 6)
• SOHO/SOHO W (Gen 6)
• NSA E5500/E6500/E7500/E8500/E8510 (Gen 5)
• NSA 2400/3500/4500/5000, NSA 220/220W, NSA 250M/250MW (Gen 5)
• TZ 100/105/200/205/210/215 (Gen 5)
• TZ 100W/105W/200W/205W/210W/215W (Gen 5)
SonicWall SonicOS 6.5 6
Upgrade Guide
SonicOS Versions Supporting Configuration
Import
The following table illustrates the supported source and destination versions of SonicOS when importing
configuration settings from one appliance to another.
Platform Configuration Import Support Tables
The tables in the following sections show the SonicWall firewalls whose configuration settings can be imported
to SonicWall platforms running SonicOS 6.5. The source firewalls are in the left column, and the destination
firewalls are listed across the top.
The legend for these tables is:
See the following sections:
• TZ / SOHO W Configuration Import Support
• NSA / SuperMassive Configuration Import Support
• NSa Configuration Import Support
SonicWall SonicOS 6.5 7
Upgrade Guide
TZ / SOHO W Configuration Import Support
SonicWall SonicOS 6.5 8
Upgrade Guide
NSA / SuperMassive Configuration Import Support
SonicWall SonicOS 6.5 9
Upgrade Guide
NSa Configuration Import Support
SonicWall SonicOS 6.5 10
Upgrade Guide
SonicWall Support
Technical support is available to customers who have purchased SonicWall products with a valid maintenance
contract and to customers who have trial versions.
The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a
day, 365 days a year. To access the Support Portal, go to https://www.sonicwall.com/support.
The Support Portal enables you to:
• View knowledge base articles and technical documentation
• View video tutorials
• Access MySonicWall
• Learn about SonicWall professional services
• Review SonicWall Support services and warranty information
• Register for training and certification
• Request technical support or customer service
To contact SonicWall Support, visit https://www.sonicwall.com/support/contact-support.
SonicWall SonicOS 6.5 11
Upgrade Guide
Copyright © 2018 SonicWall Inc. All rights reserved.
This product is protected by U.S. and international copyright and intellectual property laws. SonicWall is a trademark or registered
trademark of SonicWall Inc. and/or its affiliates in the U.S.A. and/or other countries. All other trademarks and registered trademarks are
property of their respective owners.
The information in this document is provided in connection with SonicWall Inc. and/or its affiliates' products. No license, express or implied,
by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of SonicWall products.
EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, SONICWALL
AND/OR ITS AFFILIATES ASSUME NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING
TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL SONICWALL AND/OR ITS AFFILIATES BE LIABLE FOR ANY DIRECT, INDIRECT,
CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS,
BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF
SONICWALL AND/OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SonicWall and/or its affiliates make no
representations or warranties with respect to the accuracy or completeness of the contents of this document and reserve the right to make
changes to specifications and product descriptions at any time without notice. SonicWall Inc. and/or its affiliates do not make any
commitment to update the information contained in this document.
For more information, visit https://www.sonicwall.com/legal.
To view the SonicWall End User Product Agreement, go to: https://www.sonicwall.com/legal/eupa. Select the language based on your
geographic location to see the EUPA that applies to your region.
Legend
WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are
not followed.
IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.
Last updated: 6/25/18
232-003196-02 Rev A
SonicWall SonicOS 6.5 12
Upgrade Guide
