Following a stream of customer reports that started yesterday evening, security hardware manufacturer SonicWall has provided a temporary workaround for reviving next-gen firewalls running SonicOS 7.0 stuck in a reboot loop.
SonicWall’s Gen7 firewalls are the company’s newest firewall devices providing users with encrypted traffic inspection, malware analysis, and cloud app security capabilities.
Gen7 models include TZ series firewalls for SMBs and branches, NSa series firewalls for mid-sized enterprises, NSsp series firewalls for large enterprises, data centers, and service providers, and NSv series virtual firewalls.
“If you have noticed the firewall has been stuck at a reboot loop starting from 9:30 PM EST ON 20 Jan 2022 onwards,” SonicWall said in an advisory published today.
Based on complaints shared by admins online [1, 2, 3], the issue is widespread and affects devices from all Gen7 firewall series.
Workaround available
Until a patch is released to address this bug, SonicWall has provided a temporary fix that requires admins to disable incremental updates to IDP, GAV, and SPY signature databases from the internal Diag menu.
The procedure needed to stop affected SonicWall firewalls from continuously rebooting requires you to go through the following steps:
- Unplug the WAN connection (If you are unable to login to the firewall)
- Login to the firewall from the LAN
- Navigate to The Diag page. This can be reached by typing in the LAN IP of the SonicWall in the browser, with a IP/sonicui/7/m/mgmt/settings/diag at the end. (EXAMPLE: 192.168.168.168/sonicui/7/m/mgmt/settings/diag)
- Click on internal settings to access the internal settings page or diag page. Please search for the option “Enable Incremental updates to IDP, GAV, and SPY signature databases”
DISABLE (Uncheck) this setting and select ACCEPT. It is important to select Accept for the setting to take effect.
- Plug the WAN Connection and restart the firewall.
- Monitor the firewall if this addresses the issue else reach out to support for further assistance.
While SonicWall didn’t explain what was causing the issue, admins who had to fix the problem on their end say that it has to do with “with security service licensing, unable to phone home or something as long as the WAN is plugged in.”
Earlier this month, SonicWall also confirmed that some of its Email Security and firewall products have been hit by the Y2K22 bug, leading to message log updates and junk box failures starting with January 1, 2022.
Source: www.bleepingcomputer.com