If so how is it going?
I saw reports on here of routes missing after and other issues.
I’ve updated several TZ270, 370, and 470. Haven’t run into any issues so far.
i did a TZ270. didn’t see any issues
Yesterday… updated a TZ270 HA pair. Had a problem testing failover and ended up having to factory reset the HA unit. Can’t say for sure that the firmware is to blame, but worth mentioning. No other issues to report.
NSA2700 here. Zero issues so far
Updated on 370 and 470W - no issues - all settings are in place.
Updated a 470, no issues so far
We have done a 370 and 670 so far. No issues to report.
Any update on the management plane CPU bug?
Good to see some positive results. Will look to do our TZ over the weekend…
Anyone with a failed upgrade, post it now…!
I updated on 2 2700’s and one of them changed the subnet of our ssl vpn other than that everything was fine
All NATs stopped working on a TZ 270 after the Update.
Yes, fresh configuration (no backup used) had to reboot it once due to a throughput issue, that was randomly fixed after rebooting. Nsa4700
Still to early to tell. It’s best to stay away from feature updates. I feel 7.1.1-5058 is the most stable current production firmware.
I haven’t updated yet, but this is a feature release which means it should be pretty golden and problem free b/c after this is a general release, at least that’s the thought process.
I feel we are becoming like Fortinet. When a new FW drops, people shy away from it for about a year b/c it is sooooo buggy. ugh…
I have found a weird issue with DPI SSL I will do a post on. Completely locks up and you have to reboot.
Does anyone use MS Always on VPN? IKEv2. Since the update, clients can no longer connect, rolling back they work fine, disabling security services etc, seems to have no impact either.
There was someone mentioning that on route missing in another chatter as well. Looks like its fixed once they import the 7.1.1 based settings again. Good thing to note here would be to take the settings backup locally before you start with 7.1.2 upgrade
Well I just did the upgrade and I lost one of of my site-to-site vpn routes!! Fuck Sonicwall!
One of my site-to-site vpns not longer works.
The address object of my SSLVPN pool was gone!
The routes for my SSLVPN were gone!
It wrote my DNS server backwards!! 5.0.168.192
Have done several models, including an NSv in Azure. All no issues, except two of my 4 NSa 2700s that borked the config.
Lost most SSL VPN settings, one password changed, a reversed DNS server (now 10.1.168.192), NO external DNS success (internal OK), site to site VPNs up but no traffic passing, missing global SSL VPN routes, messed up user SSL VPN routes. Weird stuff. Ended up going back to the 7.1.1 release and importing the config I had saved. Have not tried importing the 7.1.1 config into the 7.1.2 firmware - yet. SW support has configs, TSR reports, and screen shots of both examples. No word yet but has only been a few days. Both of the firewalls that corrupted the configuration were virgin configurations, they did not originate from a gen 6 model.
There is something unusual about this release though. None of my firewalls that are set to auto-detect & auto-download new firmware have yet to see it.
I did 2 sets of NSA 4700’s just to the latest version of 7.1 recently and it borked both HA units. I had to roll back one set fully and configure by hand. The 2nd one, I got HA working again but it loses it randomly if it tries to synchronize and then it eventually is recognized like an hour later. It also screwed up an IPSEC tunnel that I changed WAN addresses on, had to redo the tunnel. I am not willing to try 7.1.2 yet, so I will wait for all the bugs to flush out. Support was absolutely no help, they wanted me to take down my production in the middle of the day just so they could close the ticket.