Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to migrate from XG 330 To XGS 3300

Good evening
we have an xg330 firewall that I have to renew its license for one year only, since the tech refresh must be done before 03-31-2025, which is the EOL date of the FW XG 330.
my firewall is in HA and I would like to know the following:
1- How to migrate configuration from old FW to new XGs 3300?
2-Can we migrate or transfer the license to the new FW
3- I do not have a mail server in the company. the messaging service is provided by a provider, should the email protection module be activated, or is it not necessary?
4- What is the step-by-step action plan to migrate from the XG 330 firewall to XGS 3300?
Thanks a lot



This thread was automatically locked due to age.
Parents
  • Hi Sofos network,

    Thank you for reaching out to Sophos Community.

    Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue?

    1  You can migrate the configuration from XG to XGS by doing a backup and restore.

    Note: Remember that you can't restore a backup to an appliance with fewer physical ports. 

    2. Yes, you can transfer the license. You may contact Sophos Customer Care for better assistance, as they handle license-related queries.

    3.  If a third-party provider provides your messaging service, you may choose not to activate the module. It depends on your specific requirements and if you want email protection in your firewall.

    Note: Sophos email protection handles Anti-spam, Anti-virus, DLP, Encryption(SPX), and email malware protection.

    4. Action Plan

    • Backup configuration on XG 330
    • Restore on XGS 3300,
    • Verify the settings
    • License Transfer
    • Testing
    • Monitoring

    For more reference, kindly see below.

    Erick Jan
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • Hello  

    Thanks you for rour feedback

    if the HA is mounted, I think you have to disable it first, remove the slave FW.
    then mount the new FW and make the plan.
    after the tests we mount the HA on the new pair ?

Reply Children