This article lists the licenses and the associated components that you will receive when you migrate your existing Sophos or Cyberoam product and license directly to the Sophos XG Firewall. Our aim is to provide a license that is similar to what you have now in terms of features and, in most cases, the expiry date will be maintained (except BasicGuard, see details below).
This process only applies to upgrading the license on an existing Cyberoam or SG appliance and does not cover the transfer of a license from one appliance to another. For example, transferring a license from an SG series appliance to an XG series appliance is currently not supported.
Anyone with an eligible Cyberoam or Sophos appliance can convert that appliance to run Sophos Firewall OS (SF-OS).
The license migration is available for paid-for licenses only (i.e. paid for appliances or subscriptions) – if you have free licenses such as UTM Home or partner licenses, you need to apply for a new license.
If you want to try out SF-OS on your appliance first with the option to roll-back to your previous license, select the option to install a 30-day trial of FullGuard. FullGuard enables you to convert your existing Sophos or Cyberoam UTM license to an XG Firewall license at any point during the 30-day period. Once you select the full migration option, there is no option to roll-back to the UTM 9.X license.
You get the following when you migrate to the new Sophos XG Firewall license:
|Existing Cyberoam license name||Components included in your existing license||Your new SF license name||Components included in your new license *|
|Base||Firewall, VPN, Wireless||Base Firewall||Firewall, VPN, Wireless|
|IPS||IPS||Network Protection||RED/HTML5, ATP, IPS, Security Heartbeat|
|Web/App Ctrl||Web/Spp Ctr/||Web Protection||URL, AV, AppCtrl|
|AV||AV||You will receive both Web and Email Protection||URL, AV, AppCtrl, AS, SPX, DLP|
|AS||AS||Email Protection||AS, AV, SPX, DLP|
|Outbound AS (for SPs)||for SPs|
|WAF||-||Web Server Protection||WAF, AV, Rev. Proxy|
|Basic Support (8x5)||Enhanced Support|
|Premium Support (24x7)||Enhanced Plus Support|
|Existing Cyberoam bundle||Components included in your existing license||Your new license will contain*|
|AVAS||Web + Email + Std Support||Base Firewall (perpetual) + Web + Email|
|NGS||IPS + Web/App + Premium Support||Base Firewall (perpetual) + EnterpriseGuard + Enhanced Plus Support|
|SVS||IPS + Web/App + AV + Basic Support||Base Firewall (perpetual) + FullGuard|
|TVS||IPS + Web/App + AV + AS + Basic Support||Base Firewall (perpetual) + FullGuard|
|CVS||IPS + Web/App + AV + AS + WAF + Premium Support||Base Firewall (perpetual) + FullGuard + Enhanced Plus Support|
|EVS||IPS + Web/App + AV + AS + WAF + Premium Support + Outbound AS||Base Firewall (perpetual) + FullGuard + Enhanced Plus Support|
|SVSP||IPS + Web/App + AV + Premium Support||Base Firewall (perpetual) + FullGuard + Enhanced Plus Support|
|TVSP||IPS + Web/App + AV + AS + Premium Support||Base Firewall (perpetual) + FullGuard + Enhanced Plus Support|
*Note: Base Firewall (comprising Firewall, VPN, Wireless) is included with all new licenses. EnterpriseGuard and FullGuard include Enhanced Support (24x7). If you have Enhanced Plus Support and want to renew it when you also have the EnterpriseGuard or FullGuard bundles, you need the Enhanced to Enhanced Plus Upgrade RENEWAL SKU which acts as an add-on to Enhanced Support.
|Existing Sophos UTM license name||Components included in your existing license||Your new SF license name||Components included in your new license *|
|Essential Firewall||Firewall||* Base Firewall||Firewall, VPN, Wireless|
|Network||VPN, ATP, IPS||Network||RED/HTML5, ATP, IPS, Security Heartbeat|
|Web||URL, AV, APPCtrl||Web||URL, AV, AppCtrl|
|AS, AV, SPX, DLP||AS, AV, SPX, DLP|
|Web Server||WAF, AV, Rev. Proxy||Web Server||WAF, AV, Rev. Proxy|
|Standard Support||Enhanced Support|
|UTM Premium Support||Enhanced Support|
NOTE: * Base Firewall (comprising Firewall, VPN, Wireless) is included with all new licenses.
All of the above include Enhanced Support.
The licensing model for Software/Virtual firewalls running SF-OS is based on a maximum number of cores and maximum amount of RAM that SF-OS will utilize instead of being licensed by the number of Users/IPs. When you upgrade, you will get a different size of license depending on the license size you start with as listed below:
|SW/Virtual SF-OS license description|
|10||SFv1C2||Maximum of 1 Core and 2 GB RAM|
|25||SFv1C2||Maximum of 1 Core and 2 GB RAM|
|50||SFv2C4||Maximum of 2 Cores and 4 GB RAM|
|75||SFv2C4||Maximum of 2 Cores and 4 GB RAM|
|100||SFv4C6||Maximum of 4 Cores and 6 GB RAM|
|150||SFv4C6||Maximum of 4 Cores and 6 GB RAM|
|250||SFv6C8||Maximum of 6 Cores and 8 GB RAM|
|500||SFv8C16||Maximum of 8 Cores and 16 GB RAM|
|750||SFv8C16||Maximum of 8 Cores and 16 GB RAM|
|1.000||SFv16C24||Maximum of 16 Cores and 24 GB RAM|
|1.500||SFv16C24||Maximum of 16 Cores and 24 GB RAM|
|2.500||SFvUNL||Unlimited Cores and RAM|
|UNL||SFvUNL||Unlimited Cores and RAM|
|ATP||Advanced Threat Protection|
|DLP||Data Loss Prevention|
|RED||Remote Ethernet Device|
|VPN||Virtual Private Network|
|WAF||Web Application Firewall|