This knowledge base article answers the frequently asked questions on the migration of Sophos SG, Cyberoam NG, and iA licenses to XG Firewall. The following questions are answered:
Applies to the following Sophos products Sophos XG Firewall Software
We strongly recommend that you select the 30-day trial option first and opt for the Migrate License option later when you are certain that you'd like to commit to SF-OS. This is because there are no roll-back options once the full Migrate License option is completed.
You can select the Migrate License option at any point during the 30-day trial. You will get an SF-OS license that is equivalent to your existing license, which will be deactivated. You can activate the 30-day FullGuard trial option only once for each appliance so make sure that you are ready to start evaluating SF-OS before you select this option.
No, you cannot use Sophos SG license keys or Cyberoam NG/iA subscription keys after you have migrated your license to SF-OS. Therefore it is important that you activate those first while you appliance is still running Sophos UTM or Cyberoam CR-OS.
You can migrate any license that is paid for regardless of whether or not it has active subscriptions.
You can use each paid for license only once with the Migrate License option unless it is a Sophos cluster license, in which case you can use it for each node in the cluster.
You cannot migrate free licenses such as Sophos Essential Firewall, Free 30-day Trial, Home Use license, or the Partner generated 30-day trial license.
If you have a Sophos cluster (Active-Active) license, you can use the same license file to upgrade each appliance in the cluster.
If you have an Active-Passive setup, use your license file for the Active device – the Active device must be the one running any subscriptions you have purchased and want to migrate. If your Active-Passive setup is for hardware appliances, you must use your other ACT key to create a license file for the Passive appliance (if you haven’t already done so).
After you have migrated to SF-OS, you should order XG Firewall (SF-OS) subscriptions. You can no longer activate license keys for the original Sophos SG (UTM) or Cyberoam operating systems as you are now running XG Firewall.
For Sophos SG appliances, you should order the subscriptions that are the same for the equivalent XG model. E.g. for SG 125 order XG 125 subscriptions and SG 210 order XG 210 subscriptions.
For all Cyberoam hardware models, there are subscriptions for each specific Cyberoam model that can run SF-OS.
If your original model is a Sophos or Cyberoam Software or Virtual appliance, you should order subscriptions for the number of Cores/RAM that your appliance was migrated to.
Sign up to the Sophos Support SMS Notification Service to get the latest product release information and critical issues.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.