Scenario
Make: SonicWall Network Security Appliance (NSA)
Model: NSA 3600, NSA 6600, NSA 250M, and similar models
SonicOS Version: SonicOS 5.x / 6.x
Mode: GUI (Graphical User Interface)
Description: This article explains how to upgrade the firmware (SonicOS) on a SonicWall Network Security Appliance (NSA) firewall.
Note for SonicOS 7 (Gen7) users: The menu layout is different in SonicOS 7. Firmware options are under Device > Settings > Firmware and Settings instead of System > Settings. The overall process (back up, upload, boot) remains the same.
Before You Start
- Read the release notes of the target firmware version for known issues and upgrade requirements.
- Check that the upgrade path is supported. Some versions cannot be skipped and require an intermediate upgrade.
- Make sure the appliance has an active support subscription. It is required to download firmware from MySonicWall.
- Schedule a maintenance window. The firewall reboots during the upgrade, and network traffic will be interrupted for several minutes.
Step 1: Log in to the SonicWall NSA using your username and password.
Step 2: Navigate to System > Settings and check the Current Firmware Version. Follow steps 1, 2, 3, and 4 as shown in the image below.
Step 3: Download the firmware (SonicOS) file that needs to be uploaded. The correct and latest firmware version for your appliance is available on the MySonicWall portal:
https://www.mysonicwall.com/muir/login
To learn about the different types of SonicWall firmware (SonicOS) releases and their support status, refer to SonicWall Software or SonicOS Release Types and SonicWall NSA Firmware or SonicOS End Of Support. For current hardware and software support dates, always check SonicWall’s official product lifecycle page.
Step 4: Create a backup of the current firmware and configuration on the appliance. This saves the last known good firmware and configuration so they can be restored if anything goes wrong during the upgrade.
When you click Create Backup, a warning prompt will appear. Click OK to continue.
Step 5: Export the configuration settings file (.exp) and save it to your local drive or storage. This gives you a second copy of the configuration that is stored outside the firewall.
Step 6: Now that the configuration is backed up and saved locally, upload the new firmware (SonicOS) file to the SonicWall NSA.
Step 7: Boot the device with the new firmware by clicking the Boot button next to the uploaded firmware, as shown in the image below. Choose Boot Uploaded Firmware with Current Configuration.
Important: Do not select the option to boot with factory default settings. That option erases the current configuration.
When you click Boot, a warning prompt will appear. Click OK to continue. The SonicWall NSA will reboot immediately.
Step 8: After the SonicWall NSA has rebooted, log in again and confirm that the firmware has been upgraded by checking the firmware version under System > Settings.
The SonicWall NSA is now running the new firmware (SonicOS).
Firmware Upgrade of SonicWall in High Availability Mode
If the SonicWall NSA is in High Availability (failover) mode, the firmware only needs to be uploaded to the primary unit. The firmware is synchronized to the secondary unit automatically, so it does not need to be uploaded to both devices separately.
Before upgrading, make sure both units are healthy and in sync (check the High Availability status page). During the upgrade, the units reboot in sequence and a failover occurs, so a brief interruption is possible. Schedule the upgrade in a maintenance window and refer to SonicWall’s official knowledge base for the exact HA upgrade procedure for your SonicOS version.
Video Guide
Disclaimer: This article is for educational purposes only. Always test changes during a maintenance window and keep a backup of your configuration; we are not responsible for any downtime or data loss. This article may contain affiliate links, which earn us a small commission at no extra cost to you. See our Disclaimer and Affiliate Disclosure.
Article ID: EA00028