As well know, i have found it a long time ago and it never really solved. if you set this in your config.yml: framework: csrf_protection: enabled: false well ,you will receive this error: The option "csrf_protection" does not exist. Known options are: "virtual", "error_bubbling", "empty_data", "data", "data_class", "trim", "required", "read_only", "max_length", "pattern", "property_path", "by_reference", "error_bubbling", "error_mapping", "label", "attr", "invalid_message" and so on... This problem is reported for sonata admin group, but i didn't see the solution. so just remove the enabled false. Anyway, if you do not define the csrf protection, it will not apply automatically. So this will not be a really problem for the existing project.