License Transfer is designed to provide customers with the ability to transfer their license from one serial number to another. It should only be used to cover exceptions when the license needs to be moved to a different serial number. The following sections are covered:
Applies to the following Sophos products and versions Sophos FirewallSophos iViewSophos Firewall Manager
The main cases where this may be used are:
License Transfer is only designed for these types of cases and each license can only be transferred:
If a license transfer is needed and cannot be achieved due to the above restrictions please contact email@example.com and clearly state the source and target serial numbers as well as the reason why a transfer is needed.
Important! In some scenarios, the transfer will result in the source device being deregistered. This will happen whenever the target appliance does not have a paid-for Base license as the Base license will also be transferred from the source to the target. This is explained further below.
When you transfer a license there will be one of two outcomes depending on whether the target device has a paid-for or evaluation Base license.
The most common use cases are explained below:
As described in Sophos XG Firewall: License transfer after RMA, the license will be transferred from the faulty device automatically when a replacement device is registered through an RMA arranged with Sophos. Sometimes the wrong data is recorded in the RMA or there is some other issue that causes the replacement appliance to be allocated a 30-day evaluation license instead.
In this case, a customer may use the License Transfer feature of MySophos to transfer the paid-for license from the faulty appliance to the replacement appliance. The replacement device only has an Evaluation License, when you complete the transfer, the faulty device will be deregistered because the Base License together with any subscriptions is transferred to the replacement device, (Outcome 2).
Note: Always complete the license transfer for an RMA case before returning the faulty appliance to Sophos.
If a device has a hardware failure and there is a spare device, the customer may transfer the license from the faulty device to the spare one. The outcome will depend on the status of the license on the spare device. The cold standby device will typically have a paid-for Base License and when the transfer is finished, both devices will remain registered, (Outcome 1). There may be some situations where the replacement device only has an Evaluation License. In this case, when you complete the transfer, the faulty device will be deregistered because the paid-for Base License with any subscriptions will be transferred to the replacement device, (Outcome 2).
In a High Availability group with Active-Passive fail-over, the paid-for subscriptions need to be attached to the Active device. If everything is set up but the Passive device has subscriptions attached then customers can transfer them to the Active device. If the devices are hardware appliances then the Active appliance should have a paid-for Base License. When the transfer is complete both the Passive and the Active devices will remain registered, (Outcome 1).
If the Active device develops a hardware fault and needs to be replaced, do not transfer the license to the functioning device. In this scenario, that device will continue to operate with the license from the Active device for up to 90-days. Replace the original device within 90 days with an RMA and the replacement device will automatically receive the license from the original faulty device when registered, then put the replacement back into the HA group. Schedule time to reboot the current Active device so that the replacement with the license becomes the Active device and the original Passive device reverts back to that status.
For upgrading to a paid subscription from a free trial subscription of the Virtual version of Sophos XG Firewall, SFM or iView, make sure the free trial serial number is quoted on the order. Sophos will attach the purchased license to the free trial serial number automatically. If the free trial serial number was not quoted on the order, then customers will receive a new serial number and the purchased license will be attached to that.
If you want to retain your original installation and configuration, then you can transfer the purchased license to the original free trial serial number by following these steps:
The free trial device only has an Evaluation License. When you complete the transfer the device with the new paid-for serial number will be deregistered. The paid-for Base License and any subscriptions will be transferred to the original free trial device, (Outcome 2). After the transfer, the original free trial serial number will have the paid-for license attached. This is the serial number that should be quoted on renewal orders.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.