SonicOS 7.1.1-7051 Maintenance Release
Community Manager
Administrator
As of March 12, 2024, SonicWall has web-posted SonicOS 7.1.1-7051 maintenance release supporting all Gen7 TZ, NSa, and NSsp models (except 15700).
Please find the link for the release notes here: https://www.sonicwall.com/techdocs/pdf/sonicos-7-1-release_notes.pdf
Some of the key Issues related to stability are addressed in this maintenance release.
Note: If you’ve faced an issue related to High CPU Utilization on the Management Plane of the firewall AFTER upgrading to 7.0.1-7040 or 7.1.1-7047 firmware, please upgrade your firewall to the 7.1.1-7051 firmware.
Note: If you experience a stability or reboot issue, please upgrade the firewall from the 7.1.1-7040 or 7.1.1-7047 firmware to 7.1.1-7051 firmware.
If the issue persists please create a web case via mysonicwall.com so that SonicWall technical support can assist.
Related articles:
- How can I upgrade SonicOS firmware - https://www.sonicwall.com/support/knowledge-base/how-can-i-upgrade-sonicos-firmware/170504337655458/
Comments
Thanks for this - in my opinion, literally every firmware release should have a dedicated topic in the forum.
Issue still continued but instead of constant 100% utilization after applying the latest maintenance release it would spike 100% then 50% consistently. I disabled AppFlow and rebooted and everything cleared up! If you are not using AppFlow....disabling it will reduce Management Plane CPU utilization to normal ranges.
I was having high CPU utilization but now that i upgraded, i am having DNS issues, (we keep getting "page cannot be displayed" and after awhile it shows. Also my services GWA tells me its activated but disabled by firewall to go to "firewall->advance " but i cant find the "disable application firewall" option.
It deleted by pre-upgrade backup and now its not letting me downgrade.
Gateway Anti-Virus is Activated, but disabled by the firewall settings.
Gateway Anti-Virus Service is licensed but disabled by the firewall settings. Please go to the Device -->Firewall Settings--> screen and enable Gateway AV by unchecking "Disable Application Firewall, Anti-Spyware, Gateway AV and IPS Engine (increases maximum SPI connections)" checkbox and restarting the firewall.
It deleted by pre-upgrade backup and now its not letting me downgrade.
Saving a local copy of a backup should be part of everybody's firmware upgrade routine.
you know what else should be part of "everyone's" routine? SonicWall actually test firmware before releasing dumpster fires
I got a question gegarding 7.x here:
shall we upgrade to 7.1.1 or better stay with 7.0.1?
I read about a lot of issues with both version, but am concerned that you cant downgrade to 7.0.1 once 7.1.x is installed.
yeah but i need to do a factory reset, right? which means a downtime.
Yeah I understand what you mean. I had an sonicwall support case where the sonicwall was downgraded and they denied support. Since that day I am a bit sensitive.
Just to clarify this whole "downgrading" discussion.
I thought it was acceptable (and even permissible) to do so if a problem was encountered that adversely affected the client site.
However, having downloaded and carefully read the Release Notes referenced in the initial topic of this thread, SonicWall clearly states:
That statement answers that question.
If you have paid for a support license, then - at best - support should provide the necessary fixes to enable environmental stability. And I would be hard pressed to tell a client, "Oh, well the new firmware sucked and you complained, so I downgraded to the previous one. But I won't be able to ever raise a support case for you again."
The only way I see to sidestep this debacle is to use the currently unsupported in a Secure Upgrade transaction. That way you obtain a new device with the old firmware already installed, transfer your existing licenses, and try to continue business as usual. That should take considerably less time (albeit additional expense) than waiting for a new firmware release - or hotfix - from SonicWall.
I understand that SonicWall statement to mean the usual, that directly going back to previous version isn’t supported. Not that it isn’t supported to reset to factory defaults with an earlier version and import a configuration backup from that earlier version.
It’s even mentioned in this KB article: https://www.sonicwall.com/support/knowledge-base/how-do-i-safely-perform-a-firewall-firmware-downgrade/190506060217755/
Unless there is some ROM update in 7.1.1 that is incompatible with earlier versions but I didn’t see anything like that mentioned in the release notes, perhaps I missed it.
I can confirm that downgrading [in the supported manner, not just, re-upload the old firmware and boot off it with current configuration] from 7.1.1 to 7.0.1 works fine.