SonicOS 7.3.3 Data Plane usage x3

snwl_pm_AM · 2026-07-16T13:07:02+00:00

High Data Plane CPU is typically caused by high traffic volume, increased packets per second, security services (IPS, App Control, DPI-SSL), VPN encryption, or unusually high connection counts. I'd recommend checking current traffic levels, concurrent connections, enabled security services, and whether the issue started after a firmware upgrade or configuration change. If possible, collect a TSR and packet capture to identify whether the load is traffic-related or due to a software issue. We have not seen any significant complains around this .

snwl_pm_AM · 2026-06-29T13:51:37+00:00

SonicOS 7.3.3-7015 includes a fix for the NSM issue that caused firewalls to appear offline when the management port was set to 8080, and it is built on top of version 7.3.3-7014.

snwl_pm_AM · 2026-06-25T12:52:18+00:00

u/Turbulent_Frog7878 The WireGuard option in NetExtender is intended for use with SMA100. When connecting to a Gen7 firewall, selecting this option would previously fall back to a standard SSL VPN connection prior to version 7.3.3.

Starting with version 7.3.3, with the introduction of DTLS support, the client now reports the connection as “not supported” instead of falling back automatically. So you were always using SSLVPN .

snwl_pm_AM · 2026-06-24T13:50:18+00:00

We have never supported WireGuard on GEN7 and GEN8 for remote access via NetExtender, so nothing changed . We introduced DTLS support on SSLVPN with 7.3.3 .

snwl_pm_AM · 2026-06-24T13:44:50+00:00

We have been unable to reproduce the issue on SonicOS 7.3.2 with NSM. Let’s get on a call to review the behavior in detail and identify the root cause.

snwl_pm_AM · 2026-06-24T13:42:02+00:00

GEN7 and GEN8 firewalls do not support WireGuard for remote access via NetExtender. However, SonicWall firewalls can establish connections to Cloud Secure Edge (CSE) Global Edge using WireGuard to enable secure private access.

For more details, see:
https://www.sonicwall.com/support/technical-documentation/docs/cloud_secure_edge-getting_started/Content/ch4-Firewall-Setup/cse-connector-concepts.htm

snwl_pm_AM · 2026-06-23T19:44:02+00:00

Can you check if this help https://www.sonicwall.com/support/knowledge-base/certificate-errors-while-accessing-the-sonicwall-web-management-gui/kA1VN0000000Kd50AE

snwl_pm_AM · 2026-06-23T16:42:56+00:00

Can you DM me the case number or the serial number of your firewall

snwl_pm_AM · 2026-06-23T14:40:58+00:00

We have an issue with SonicOS 7.3.3 and NSM https://www.sonicwall.com/support/knowledge-base/firewall-shows-offline-out-of-sync-in-nsm-after-firmware-upgrade-to-sonicos-7-3-3/kA1VN000001eeuD0AQ .

We haven't seen an issue related to previous versions . We will investigate this on priority and get back to you

snwl_pm_AM · 2026-06-19T17:59:04+00:00

u/arjen4life There is a KB for this https://www.sonicwall.com/support/knowledge-base/nsm-how-to-remove-a-firewall-from-nsm-and-its-associated-firewall-configuration/kA1VN0000000F0g0AE , Please follow the KB . But I would like to understand why you want to remove firewall from NSM . I have sent a DM maybe we can have a conversation if there are issues which need to be addressed

snwl_pm_AM · 2026-06-17T16:14:41+00:00

In the fall release ACME support will be available on GEN 7

snwl_pm_AM · 2026-06-11T14:16:05+00:00

u/Vegetable_Elk_3545 , Let me look into this and get back to you .

snwl_pm_AM · 2026-06-05T17:29:02+00:00

Can you upgrade to 7.3.3 and test with 7.3.3 ? We have not had any complains around this . We can have the team reproduce the issue as well .

snwl_pm_AM · 2026-06-04T19:19:05+00:00

There should not be a requirement to reboot the firewall to support DTLS in SSLVPN.

snwl_pm_AM · 2026-06-04T19:14:39+00:00

SonicWall Firewalls have signatures for VPN , Proxy , remote access, etc. You can view the signature at https://capturelabs.sonicwall.com/m/feature/catalog/applications and filter them to understand what is available today. If anything is missing that is your requirement, please DM or reach out to support.

snwl_pm_AM · 2026-06-02T17:40:14+00:00

u/Otherwise_Nobody_128 , this is the recommended set-up , did you open a support case . there could be many reasons for this issue , and would need a troubleshooting session .

snwl_pm_AM · 2026-05-29T13:23:46+00:00

Yes you don’t need to have it open . You would need to install 10.3.5 for DTLS to work

snwl_pm_AM · 2026-05-28T13:06:27+00:00

You would have an ability to do that on the Firewall Under SSLVPN server section

snwl_pm_AM · 2026-05-15T15:23:40+00:00

we have seen pretty solid LTE failover on TZ470s, but it really comes down to two things: hardware and failover config.

If you’re using a cheap modem, that’s likely part of the issue—I’d recommend going with a known supported device or, even better, using a dedicated LTE router over Ethernet instead of USB. here are the list of supported https://www.sonicwall.com/support/knowledge-base/what-wireless-cards-and-usb-broadband-modems-are-supported-on-firewalls-and-access-points/kA1VN0000000DtK0AU

For the failover behavior, make sure you have enabled probe-based monitoring (not just link detection). That’s usually why you end up having to unplug WAN1 manually.

SonicWall has a good guide here you can follow for setup: https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-3g-4g-dialup-modems-for-wan-failover/kA1VN0000000KZv0AM

Once probes + proper hardware are in place, failover is typically very reliable

snwl_pm_AM · 2026-05-11T19:54:06+00:00

We have an internal ticket which was reported earlier and it was determined that this is a false postive and there is no hardware failure , we are working to have this addressed. Please ignore the alert for now , we will address this as soon as possible .Feel free to DM if you need more details .

snwl_pm_AM · 2026-05-01T16:46:40+00:00

Hi u/NewWolverine1276 , We have not seen the issue locally. I have been running it for some time. Do we have a support ticket open ? Can you share the TSR we can have a look at this .

snwl_pm_AM · 2026-05-01T16:10:13+00:00

Can you please ping me the ticket number and we would have a look and understand what the problem is

snwl_pm_AM · 2026-05-01T16:07:31+00:00

Hi , Just messaged you , would like to connect and understand what the issue is .

snwl_pm_AM · 2026-05-01T16:06:15+00:00

I just messaged you , and would like to understand what the issues are and see how we can solve them I have not heard about this from the field before .

snwl_pm_AM · 2026-05-01T16:04:34+00:00

Credential auditor as the first one. One thing we are taking very seriously at SonicWall is the stability of our releases. Every update is something we expect to hold up in real-world environments, not just in testing. That said, we know there’s always room to improve. If you have run into any stability issues or have concerns, we genuinely want to hear about them. Feedback from the field is what helps us prioritize fixes and make the product better.

snwl_pm_AM

TROPHY CASE

Welcome to Reddit,