[German]The SonicWall SMA 100 firewall product line will soon no longer be supported. After backup files were recently exposed via MySonicWall Cloud Backup for some customers, SonicWall appears to be responding. There is a firmware update for the SonicWall SMA 100 product line that is designed to remove rootkit malware.
According to the manufacturer, the SonicWall Secure Mobile Access (SMA) 100 Series solution simplifies secure end-to-end remote access to corporate resources hosted in on-premises, cloud, and hybrid data centers.
However, the manufacturer recently announced that it would be ending support for the SonicWall SMA 100 product family ahead of schedule a few days ago. SonicWall brought forward the end-of-support (EOS) date for all SMA100 devices to October 31, 2025. The reason given for this was that vulnerabilities in older VPN appliances such as the SMA 100 series had been increasingly exploited by cybercriminals in recent months. I reported on this in the article Early termination of support for SonicWall SMA100.
Firmware-Update für SonicWall SMA100
I learned from this article on Bleeping Computer that SonicWall is providing a firmware update for SonicWall SMA 100 appliances. SonicWall Advisory SNWLID-2025-0015 dated September 22, 2025 states that the vendor has provided a firmware update, SonicWall SMA 100 10.2.2.2-92sv. The published firmware update has been equipped with additional file checking. This offers the possibility of removing known rootkit malware from SMA devices.
SonicWall strongly recommends that users of the SMA 100 series (SMA 210, 410, and 500v) upgrade to version 10.2.2.2-92sv. The manufacturer mentions that the Threat Intelligence Report from the Google Threat Intelligence Group (GTIG) points to potential risks when using older versions of the SMA100 firmware. Furthermore, SonicWall strongly recommends that all companies using SMA 100 Series devices review and implement the security measures described in this KB article.
Similar article:
Warning of attacks on SonicWall firewalls (SSL VPNs)
Early termination of support for SonicWall SMA100
MySonicWall Cloud Backup File Incident: Configuration backup disclosed
