• SonicOS 7.1
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• About Firewall
  • Firewall Workflow
• Advanced
  • Changing Between SonicOS
    • Changing From Classic to Policy Mode
    • Changing From Policy to Classic Mode
  • Detection Prevention
  • Dynamic Ports
  • Source Routed Packets
  • Internal VLAN
  • Access Rule Options
  • IP and UDP Checksum Enforcement
  • Jumbo Frame
  • Connections
  • Control Plane Flood Protection
  • IPv6 Advanced Configuration
  • TCP
    • TCP Settings
    • Layer 3 SYN Flood Protection- SYN Proxy
    • Layer 2 SYN/RST/FIN Flood Protection - MAC Blacklisting
    • WAN DDOS Protection (Non-TCP Floods)
    • TCP Traffic Statistics
  • UDP
    • UDP Settings
    • UDP Flood Protection
    • UDP Traffic Statistics
    • UDPV6 Traffic Statistics
  • ICMP
    • ICMP Flood Protection for IPv4 version
    • ICMP Traffic Statistics
    • ICMP Flood Protection for IPv6 version
    • ICMPv6 Traffic Statistics
• Flood Protection
• SSL Control
  • Key Features of SSL Control
  • Key Concepts to SSL Control
  • Caveats and Advisories
  • Configuring SSL Control
  • Custom List
  • Enabling SSL Control on Zones
  • SSL Control Events
• Cipher Control
  • TLS Ciphers
    • Blocking/Unblocking Ciphers
    • Filtering Ciphers
      • Selecting Display Options
      • Displaying Ciphers by Strength
      • Displaying Ciphers by Block/Unblock
      • Displaying Ciphers by CBC Mode
      • Displaying Ciphers by TLS Protocol Version
  • SSH Ciphers
• Real-Time Black List (RBL) Filter
  • Configuring the RBL Filter
    • Enabling RBL Blocking
    • Adding RBL Services
    • Configuring User-Defined SMTP Server Lists
      • Configuring a White List
      • Configuring a Black List
    • Testing SMTP IP Addresses
• Use cases

Changing Between SonicOS

SonicWall NSv series firewalls support both SonicOS. SonicOS is also known as Classic mode, and SonicOS is known as Policy mode. Selection of or changing between Classic and Policy modes is supported on NSv series starting in SonicOS 7.0.1 with the following use cases:

• Fresh deployments of SonicOS or SonicOS
• Upgrading an existing deployment from SonicOS 7.0.0 to SonicOS 7.0.1
• Upgrading an existing deployment from SonicOS 6.5.4.v to SonicOS 7.0.1
• Changing an existing deployment from SonicOS 7.0.1 to SonicOS 7.0.1 (from Classic mode to Policy mode)
• Changing an existing deployment from SonicOS 7.0.1 to SonicOS 7.0.1 (from Policy mode to Classic mode)

If you have existing NSv deployments running SonicOS 6.5.4.v and plan to continue using NSv on SonicOS 7.1, the ability to change modes provides flexibility to upgrade seamlessly into Classic mode while evaluating or preparing for the move to Policy mode.

Closed-network NSv deployments also support Classic and Policy modes. In a closed network, the lack of internet access prevents the NSv from communicating with the SonicWall License Manager, so the Manual Keyset option is used to apply the security services and other licensing on the firewall. You can select the mode when obtaining the license keyset in MySonicWall. If you switch between modes, you will need to obtain and apply a new license keyset for your NSv.

For more information on the supported modes that can be used on the different SonicOS firewalls see the table in Working with SonicOS.

The CLASSIC and POLICY mode switching option is only visible in SonicOS after it is enabled in MySonicWall. Log into your MySonicWall account and enable Firewall Mode Switching for the respective firewall serial number.

The Settings screen on the NETWORK | Firewall > Advanced page displays the CLASSIC and POLICY options for Security Services Enforcements.

The current mode is indicated by the black button. These buttons are used to initiate the mode change.

For more information, refer to:

• Changing From Policy to Classic Mode
• Changing From Classic to Policy Mode