Sophos Community
  • User
  • Help
  • Site
  • Search
  • User
  • All Groups
  • Knowledge Base
  • Community Blog
  • Member Recognition
  • More
  • Cancel

Knowledge Base

  • Advisories
  • +CyberoamOS
  • +Data Control and DLP
  • Email Appliance
  • +Endpoint Security and Control
  • +Free Tools
  • +General
  • +Mobile
  • +PureMessage
  • +Reflexion
  • +SafeGuard encryption
  • +Server protection
  • +Sophos Central
  • Sophos Clean
  • Sophos Home
  • +Sophos UTM 9
  • Web Appliance
  • +XG Firewall
Tweets by SophosSupport

Sophos XG Firewall: FAQ on the migration of Sophos SG, Cyberoam NG, and iA licenses

  • Article ID: 125614
  • Updated: 25 Jan 2019
  • 1 people found this helpful
  • Available in: English | Español | Italiano | 日本語 | Français | Deutsch

Overview

This article answers the frequently asked questions on the migration of Sophos SG, Cyberoam NG, and iA licenses to XG Firewall.

The following questions are answered:

  • Should I start by using the 30-day FullGuard trial option?
  • Can I use Sophos UTM license keys or Cyberoam subscription keys on an appliance running SF-OS?
  • Which Sophos UTM or Cyberoam licenses can I migrate?
  • What if I have an Active-Active or Active-Passive setup?
  • What subscriptions should I order?

Applies to the following Sophos products
Sophos XG Firewall Software

FAQ on the migration of Sophos SG, Cyberoam NG, and iA licenses

Should I start by using the 30-day FullGuard trial option?

We strongly recommend that you select the 30-day trial option first and opt for the Migrate License option later when you are certain that you'd like to commit to SF-OS. This is because there are no roll-back options once the full Migrate License option is completed.

You can select the Migrate License option at any point during the 30-day trial.
You will get an SF-OS license that is equivalent to your existing license, which will be deactivated.
You can activate the 30-day FullGuard trial option only once for each appliance so make sure that you are ready to start evaluating SF-OS before you select this option.

Can I use Sophos UTM license keys or Cyberoam subscription keys on an appliance running SF-OS?

No, you cannot use Sophos SG license keys or Cyberoam NG/iA subscription keys after you have migrated your license to SF-OS. Therefore it is important that you activate those first while you appliance is still running Sophos UTM or Cyberoam CR-OS.

Which Sophos UTM or Cyberoam licenses can I migrate?

You can migrate any license that is paid for regardless of whether or not it has active subscriptions.

You can use each paid for license only once with the Migrate License option unless it is a Sophos cluster license, in which case you can use it for each node in the cluster.

You cannot migrate free licenses such as Sophos Essential Firewall, Free 30-day Trial, Home Use license, or the Partner generated 30-day trial license.

What if I have an Active-Active or Active-Passive setup?

If you have a Sophos cluster (Active-Active) license, you can use the same license file to upgrade each appliance in the cluster.

If you have an Active-Passive setup, use your license file for the Active device – the Active device must be the one running any subscriptions you have purchased and want to migrate.
If your Active-Passive setup is for hardware appliances, you must use your other ACT key to create a license file for the Passive appliance (if you haven’t already done so).

What subscriptions should I order?

After you have migrated to SF-OS, you should order XG Firewall (SF-OS) subscriptions.
You can no longer activate license keys for the original Sophos SG (UTM) or Cyberoam operating systems as you are now running XG Firewall.

For Sophos SG appliances, you should order the subscriptions that are the same for the equivalent XG model.
E.g. for SG 125 order XG 125 subscriptions and SG 210 order XG 210 subscriptions.

For all Cyberoam hardware models, there are subscriptions for each specific Cyberoam model that can run SF-OS.

If your original model is a Sophos or Cyberoam Software or Virtual appliance, you should order subscriptions for the number of Cores/RAM that your appliance was migrated to.

Related information

  • XG Firewall: Licensing guide
  • XG Firewall: FAQ on activating XG license keys
  • XG Firewall: FAQ on High Availability (HA) licensing
  • XG Firewall: FAQ on new registration
  • XG Firewall: Activation and registration error messages

Feedback and contact

If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.
This is invaluable to us to ensure that we continually strive to give our customers the best information possible.

Article appears in the following topics
  • XG Firewall

Did this article provide the information you were looking for?

Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.

  • Submit
Sophos Footer
  • T&Cs
  • Help
  • Cookie Info
  • Contact Support

© 1997 - 2019 Sophos Ltd. All rights reserved.