u/mavantix

SonicOS 7.3.3-7014 (and now -7015) adds two new GEO-IP filters: Kosovo and South Sudan

However, it adds them as ALLOWED in your global GEO-IP filter, so if you scope GEO-IP to only allow specific counties, these will be added and allowed to communicate with your router.

Horribly irresponsible defaults on Sonicwall's part, these additions should default to BLOCKED.

Plan to fix your GEO-IP list as part of your upgrade process!

Had major issues in my lab testing ThinOS 2602_10.0765 on a Opt3000 TC. I highly recommend not upgrading and/or testing it thoroughly in your lab first. It seemed like MQTT would not connect, was displaying failures connecting to WMS in the logs, not loading policy correctly, and not installing assigned AVD package, etc. It was not exactly as described in the KB # 000444141 on 2602 from March, but similar (the Client Info was NOT all N/A and the TC was not totally froze). I even tried factory reset, it would reconfigure WMS from DHCP and pull in certain policy, but still not load the assigned packages, etc. It's a BROKE build IMHO.

I had to revert to 2602_10.0555 to restore normal WMS management and everything seems back to normal.

Lab WMS is v5.5 HF1 (5.5.0.777) Opt3000's BIOS v1.32.1 My test configs are not complex: Client Mac auto login, RDP (AVD) session config, desktop info, power/sleep, VNC remote shadow...

Ref KB # 000444141: https://www.dell.com/support/kbdoc/en-us/000444141/dell-thinos-10-is-inoperable-after-firmware-2602-upgrade