Security protection on Sophos Firewall requires a Subscribed/Evaluating subscription.
If a subscription is Expired/Unsubscribed, Sophos Firewall cannot perform corresponding security protection.
Here is table of subscription and security features.
Reference: Sophos Firewall > Administration Help > Licensing
Once Base Firewall becomes Expired/Unsubscribed,
It applies to Sophos Firewall v18 and later.
Once Email Protection becomes Expired/Unsubscribed, Sophos firewall delivers email without anti-spam/anti-virus scanning.
It applied to all Sophos Firewall OS versions.
If both Enhanced support and Enhanced plus support are expired/unsubscribed
2022-12-09, updated the section "Enhanced support, Enhanced plus support"
2022-09-29, minor update
2022-07-19, updated for v19.0 MR1
2022-01-14, fixed expired URL
2021-05-31, updated with section "Email protection"
2021-05-24, first release
This is messed up, I've bought a device that would have worked until his death and now it will be just a white brick only because I've updated to V18. I'll roll back to V17.5 for the next days and in the meanwhile I'll buy a firewall of a different brand!
What a shame Sophos!
What do you mean? Base License is valid until 2999.
I read that "Sophos Firewall v18: impact of expired license" and on the 1st of April the licenses of my XG 125 are going to expire.I gotta say that I didn't read which license, I've just seen a list of licenses.But if the base firewall never expire, why in this article there is this "Once Base firewall becomes Expired/Unsubscribed"?By the way, I see that the Webserver protection is expiring, so it still means that I have to renew the licenses (I'm looking for the prices and I really don't understand which license should I get, is there a comparison of the different licenses with the relative features?).
There are certain scenarios, which can lead to a deactivated/expired Base License. This article is just a complete view of all scenarios. But for the general customer, the base license will not expiry.
SFOS comes with a set of licenses, which activate features. Thats the subscription model. So if you do not have any license, you still have access to the base license. Check this PDF for the features in each subscription.
https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-firewall-br.pdf Page 5 / 6 (It is about XGS Hardware, but the subscription model is the same).
I see, it seems I jumped to quickly to conclusions!
I need the Standard Protection Bundle and the Web Server Protection, but my distributor doesn't have the latter, it only has standard, enhanced and xtream bundles...how can I buy what I need?Thanks
Bundle basically means Hardware + Software. So you need the Standard Protection + Webserver Protection as a "a la card" license. They should be able to generate you an offer for you appliance.
LuCar Toni said:What do you mean? Base License is valid until 2999.
Is it though? My understanding is that the current policy is to downgrade Base License validity to match product EOL date, essentially sabotaging the system with a kill switch. Is this incorrect?
Generally speaking: Running End of Life Hardware without any updates (Security, Pattern etc.) is a bad idea. If no EOL is announced, the Base License will still be Y2999.
LuCar Toni said:Generally speaking: Running End of Life Hardware without any updates (Security, Pattern etc.) is a bad idea.
This is a subterfuge, not an answer, and I take it as confirmation of what I said, that Sophos is actively going to sabotage products to become virtually useless and obsolete after a period that they established, and that's actually a worse idea in my opinion.
LuCar Toni said:If no EOL is announced, the Base License will still be Y2999.
That's like saying that the day is as long as the night is short. Every product (where applicable) gets an EOL date eventually, so it seems that "wordplay" means that every product will be sabotaged by Sophos except those that aren't yet. Essentially, Y2999 is meaningless in the sense that currently no product has an EOL past 2026.
Thanks for not answering though.