Overview

This article lists the licenses and the associated components that you will receive when you migrate your existing Sophos or Cyberoam product and license directly to the Sophos XG Firewall. Our aim is to provide a license that is similar to what you have now in terms of features and, in most cases, the expiry date will be maintained (except BasicGuard, see details below).

Migrating to the new Sophos XG Firewall

This process only applies to upgrading the license on an existing Cyberoam or SG appliance and does not cover the transfer of a license from one appliance to another. For example, transferring a license from an SG series appliance to an XG series appliance is currently not supported.

Anyone with an eligible Cyberoam or Sophos appliance can convert that appliance to run Sophos Firewall OS (SF-OS).
The license migration is available for paid-for licenses only (i.e. paid for appliances or subscriptions) – if you have free licenses such as UTM Home or partner licenses, you need to apply for a new license.

If you want to try out SF-OS on your appliance first with the option to roll-back to your previous license, select the option to install a 30-day trial of FullGuard. FullGuard enables you to convert your existing Sophos or Cyberoam UTM license to an XG Firewall license at any point during the 30-day period. Once you select the full migration option, there is no option to roll-back to the UTM 9.X license.

What do you get when you migrate to the new Sophos XG Firewall license?

You get the following when you migrate to the new Sophos XG Firewall license:

• Base Firewall in addition to your other licenses.
   
• If you had Cyberoam AV, you will get BOTH Web and Email.
  
  
• The available license bundles are (all of these include Enhanced Plus Support):
  • EnterpriseGuard comprises Base Firewall, Network and Web.
  
  
  • FullGuard comprises Base Firewall, Network, Web Email and Web Server.
    (If you have upgraded to FullGuard from BasicGuard, please check the terms of your license agreement as this may have changed.)
  
  
  • Sophos FullGuard becomes Sophos Firewall FullGuard.
  
  
  • FullGuard Plus comprises Base Firewall, Network, Web, Email, Web Server and Sandstorm.
  
  
  • FullGuard Plus becomes Sophos Firewall FullGuard Plus.
    
    
• If you have Cyberoam licenses for two products, such as Cyberoam Web and Cyberoam AV, and if the licenses run for different terms, we will work out the length of the new license.

• If you have a Sophos BasicGuard, license it will be converted to a FullGuard license and the remaining term will be halved in length compared to the time you had remaining on BasicGuard.

If you currently have a Cyberoam license...

License Bundles

*Note: Base Firewall (comprising Firewall, VPN, Wireless) is included with all new licenses. EnterpriseGuard and FullGuard include Enhanced Support (24x7). If you have Enhanced Plus Support and want to renew it when you also have the EnterpriseGuard or FullGuard bundles, you need the Enhanced to Enhanced Plus Upgrade RENEWAL SKU which acts as an add-on to Enhanced Support.

If you currently have a Sophos UTM license...

NOTE: *  Base Firewall (comprising Firewall, VPN, Wireless) is included with all new licenses.

License bundles

• EnterpriseGuard comprises Base Firewall, Network and Web.

• FullGuard comprises Base Firewall, Network, Web Email and Web Server.
  (If you have upgraded to FullGuard from BasicGuard, please check the term of your license as this may have changed.)

• FullGuard Plus comprises Base Firewall, Network, Web, Email, Web Server and Sandstorm.

All of the above include Enhanced Support.

Sophos Software/Virtual UTM upgrades

The licensing model for Software/Virtual firewalls running SF-OS is based on a maximum number of cores and maximum amount of RAM that SF-OS will utilize instead of being licensed by the number of Users/IPs. When you upgrade, you will get a different size of license depending on the license size you start with as listed below:

 

Abbreviations used for components