What changes when Sophos firewall license expires?

Devices with expired licenses or lacking valid support contracts present a heightened security risk. Because attackers often target outdated hardware. To address this, Sophos is updating its compliance policies to ensure all systems are equipped with the latest hardware and software.

New Licensing Procedure Starting February 2025

Starting February 2025, Sophos will implement a new license compliance process across all products to enhance customer security. Expired or non-compliant products increase vulnerability to attacks, Sophos is introducing functionality changes to alert customers and prompt urgent action. Customers with expired support contracts must renew their licenses to maintain access to customer support and ensure continuous protection. As a result the Sophos Enhanced Support license will become even more important in the future as Sophos removes more features from the basic license

Changes for XG hardware customers

Starting February 24, 2025, customers with XG hardware without active subscriptions or support contracts will face these changes:

• 1. WAN-facing portals turned off – WebAdmin and User Portal only.
  2. On-Box reporting deactivated – No Local reporting and analysis.
  3. WebAdmin pop-ups – Risk acceptation and confirmation for outdated devices.
  4. Weekly EOL emails – Reminders about hardware End-of-Life.

These changes should help ensure end user and partners awareness that they use outdated hardware.

Changes for all Sophos Firewall customers running SFOS

Starting March 28, 2025, the following changes apply to all Sophos Firewall customers:

• 1. Central Management & Reporting will stop– Requires a valid subscription or support contract.
  2. No Technical support – No RMA, phone support, or firmware updates without an active support contract (except for the first three updates).

RMAs will still be honoured within the first year due to legal warranty requirements.

Call to Action:

When the firewall license expires certain important functions such as Central Management and Reporting are no longer available. Also, technical support is no longer available.

To ensure that the firewall remains optimally protected and functional, the following steps should be taken:

1. Renew subscriptions:

Check whether the firewall has an active subscription and a valid support (Sophos Enhanced Support) contract. Sophos Enhanced Support is part of the protection bundles Standard protection and Xstream protection. Or available separate license.

2. Hardware Migration:
   • If you are still using XG hardware, upgrade to XGS hardware before EOL March 31, 2025.
   • The XG hardware will continue to work on base license, but with limited functionality and without support.

For more information, contact [email protected].