• About SonicOS
  • What is SonicOS?
  • Where Do I Find Information About SonicOS?
  • SonicOS Web Interface to Administration Guide Reference
  • Guide Conventions
• Firewall Management Methods
• About the SonicOS Management Interface
  • Logging Into SonicOS
  • Logging Out of SonicOS
  • Contemporary vs Classic Web Interface
  • Global Search
  • Online Help
  • Notification Center
  • SonicOS Guides (Wizards)
    • Public Server Guide
    • VPN Guide
    • Wireless Guide
    • SDWAN Guide
  • SSH Terminal Access
  • About the Top Menu Views
  • About the API and CLI
  • Legal Information
• Features of SonicOS
  • Features Available in Policy Mode
    • About Unified Policies in SonicOS
    • About the Shadow Feature
    • About Action Profiles
  • Features Available on TZ Series, NSa Series, and NSsp Series
    • Switch Management
    • PortShield Groups
    • Access Points Management
    • WWAN and 4G/LTE
    • Storage Device Configuration
  • Features Available on NSv Series
    • Feature Support on NSv Series
    • Changing Between Classic Mode and Policy Mode
      • Choosing the Mode in Fresh Deployments or Upgrades
      • Changing From Classic to Policy Mode
      • Changing From Policy to Classic Mode
  • Features Available on NSsp 15700
    • About Multi-Instance
• SonicWall Support
  • About This Document

Changing Between Classic Mode and Policy Mode

SonicWall NSv series firewalls support can be configured for both Classic mode and Policy mode. Selection of or changing between Classic and Policy modes is supported on NSv series starting in SonicOS 7.0 with the following use cases:

• Fresh deployments of SonicOS
• Upgrading an existing deployment from SonicOS 7.0 to SonicOS 7.0
• Upgrading an existing deployment from SonicOS 6.5.4.v to SonicOS 7.0
• Changing an existing deployment from SonicOS 7.0 to SonicOS 7.0 (from Classic mode to Policy mode)
• Changing an existing deployment from SonicOS 7.0 to SonicOS 7.0 (from Policy mode to Classic mode)

If you have existing NSv deployments running SonicOS 6.5.4.v and plan to continue using NSv on SonicOS 7.0, the ability to change modes provides flexibility to upgrade seamlessly into Classic mode while evaluating or preparing for the move to Policy mode.

Closed-network NSv deployments also support Classic and Policy modes. In a closed network, the lack of internet access prevents the NSv from communicating with the SonicWall License Manager, so the Manual Keyset option is used to apply the security services and other licensing on the firewall. You can select the mode when obtaining the license keyset in MySonicWall. If you switch between modes, you will need to obtain and apply a new license keyset for your NSv.

The CLASSIC and POLICY mode switching option is only visible in SonicOS after it is enabled in MySonicWall. Log into your MySonicWall account and enable Firewall Mode Switching for the respective firewall serial number.

The Settings screen on the NETWORK | Firewall > Advanced page displays the CLASSIC and POLICY options for Security Services Enforcements.

The current mode is indicated by the black button. These buttons are used to initiate the mode change.

For more information, refer to:

• Choosing the Mode in Fresh Deployments or Upgrades
• Changing From Classic to Policy Mode
• Changing From Policy to Classic Mode