Migration Tool 4.36.0 Release Notes
Version 4.35.4
April 2024
Important
Settings can be exported from one firewall to another, but not every SonicWall model is compatible with all others. Similarly, some firmware versions are not compatible with subsequent versions as new features get added or as changes are made to existing features. Understand the compatibility described in the following section to avoid possible corruption from importing unsupported settings.
Compatibility and Installation Notes
SonicOS 6.5.1.3 is the minimum version supported for importing settings to a firewall running SonicOS 7. If you try to migrate from an older version of SonicOS, it becomes a two-step process. Update the firewall to SonicOS 6.5.1.3 or higher. Then use the migration tool to create the settings file to import to the SonicOS 7 firewall.
Certain settings such as Global Bandwidth Management, Virtual Assist, Content Filter Client Enforcement, and others cannot be imported into SonicOS 7. A detailed matrix showing the compatible Source and Destination SonicWall firewalls is provided in the KB article, Can Settings be Exported/Imported from One SonicWall to Another? Refer to it for the most current information.
Migration Tool doesn’t support SonicOS 7.1.1 release. Choose SonicOS 7.0.1-5145 firmware version as the target version of the migrated file in the Migration Tool and then upgrade to 7.1.1. For more information refer to KB article, Migration Tool does't support target firmware of SonicOS 7.1.1.
The Migration Tool does not support firewalls running SonicOS with Policy Mode. This includes any of the NSv Series devices that are running in Policy Mode and the NSsp 15700.
The SonicWall Migration Tool allows you to migrate some settings from third-party vendors. In the following table, the X indicates which settings can be migrated for each vendor and which are not supported at this time.
| Feature | Checkpoint | Cisco | Fortinet | Palo Alto | Sophos | Watchguard |
|---|---|---|---|---|---|---|
| Zone | X | X | X | X | X | X |
| Access Rule | X | X | X | X | X | X |
| Network Object | X | X | X | X | X | X |
| Status Route | Not supported | X | X | X | Not supported | X |
| Service | X | X | X | X | X | X |
| NAT | X | X | Not supported | X | Not supported | X |
| VPN | Not supported | Not supported | Not supported | Not supported | Not supported | Not supported |
SonicWall does not fully test all features for all third-party devices. To minimize migration issues be sure to test the migrated setting in your test environment before deploying to production.
What's New
This release provides fixes for customer reported issues.
Resolved Issues
| Issue ID | Issue Description |
|---|---|
| DEVT-3165 |
Issue: Block uploading SonicWall configuration files where firmware version is greater than the latest supported target firmware version. Fix: Added an alert message when a user attempts to migrate from a version greater than the maximum supported version on the tool. |
| DEVT-3191 |
Issue: The message "Uploaded file is corrupted" is displayed when the uploaded pref contains the zone name using Japanese characters. Fix: Fixed migration failures when there are non-English characters in the zone names. |
| DEVT-3192 |
Issue: Key error in code causing intermittent migration failure. Fix: Fixed the intermittent failures in migration when the "Drop default NAT policies" option is selected. |
| DEVT-3193 |
Issue: Routes related to VPN Tunnel Interfaces have incorrect/random interfaces assigned after migration. Fix: Fixed the issue of VPN Routing Rules mismatch when dropping interfaces during migration. |
Known Issues
| Issue ID | Issue Description |
|---|---|
| DEVT-3209 |
Error "IPv6 Interface number: Prefix of this IPv6 address is advertised on another interface" in Migration Tool version 4.35.3. |
Was This Article Helpful?
Help us to improve our support portal