Sophos Firewall: Important Change for Customers Without a Support License

The Sophos Enhanced Support license will become even more important in the future as Sophos removes more features from the basic license. Almost two and a half years ago, Sophos abolished free updates, and now there are further important changes.

As we enter 2025, Sophos is announcing significant changes to ensure license management and security for all customers. These changes affect both the XG hardware series and all Sophos Firewalls (SFOS) and are designed to highlight the importance of having up-to-date licenses and support contracts. Read this blog post to find out what changes are coming and how to prepare for them.

Why Sophos believes these changes are necessary

Cyber attacks are becoming increasingly targeted and complex. Devices with expired licenses or without valid support contracts pose an increased risk. Outdated hardware and inadequately protected networks are preferred targets for attackers. For this reason, Sophos is adapting its policies to ensure that all systems are equipped with up-to-date hardware and software.

Changes for XG hardware customers

As of February 24, 2025, the following changes will take effect, specifically affecting customers with XG hardware who do not have active subscriptions (other than the base license) or support contracts:

1. Deactivation of WAN-based portals:
   • WebAdmin and User Portal are only accessible internally.
2. Setting the on-box reporting:
   • Local reporting and analysis functions are deactivated.
3. Pop-up notifications in WebAdmin:
   • Administrators must regularly confirm the risk posed by outdated devices.
4. Weekly EOL e-mail notifications:
   • Reminder of the upcoming End-of-Life (EOL) of the hardware.

These measures should help to ensure that people become aware of outdated hardware at an early stage and take appropriate steps to update it.

Changes for all Sophos Firewall customers

The following changes will come into force for all Sophos Firewall customers (regardless of hardware) from March 28, 2025:

1. No access to Central Management and Central Reporting:
   • Central management and reporting functions are no longer available without a valid subscription or support contract.
2. Discontinuation of technical support from April 2025:
   • Without a valid support contract, there is no longer access to technical support, including RMA, telephone support and firmware updates (except for the first three updates).

These changes affect all firewall users who do not have active support contracts.

RMAs will certainly still be carried out within the first year, as otherwise there is a conflict with the law, which prescribes the replacement of hardware with a legal guarantee.

What you should do now

To ensure that the firewall remains optimally protected and functional, the following steps should be taken:

1. Renew subscriptions:
   • Check whether the firewall has an active subscription and a valid support contract. (Sophos Enhanced Support)
2. Update hardware:
   • If you are still using XG hardware, plan to upgrade to XGS hardware before March 31, 2025.
3. Carry out regular maintenance:
   • Ensure that the devices are regularly updated and comply with the latest safety standards.

FAQ