Free 3-month term overlap when you migrate to Sophos Firewall using our migration promos

Summary

Starting June 18, 2025, Sophos UTM (SG) customers can receive a free 3-month license overlap when migrating to Sophos Firewall (SFOS) with a 3-year Xstream Protection subscription. This offer helps partners manage migration timelines while providing an added incentive for customers and ensuring they stay protected.

Overview

Sophos UTM customers already benefit from attractive promo discounts in combination with the purchase of a 3-year term for Xstream Protection when they migrate to Sophos Firewall and the XGS Series.

From June 18, 2025, we're adding additional discounts to our existing promo codes to provide customers with a free 3-month term for their current Sophos UTM subscriptions, which can run in parallel to the purchased Xstream Protection license. There will also be a new promo code to provide this same incentive to customers with UTM SW/Virtual when they migrate to Sophos Firewall SW/Virtual (with a 3-year term for Xstream Protection).

Migration Planning

A successful migration from Sophos UTM to Sophos Firewall requires good planning. Whether your Sophos partner uses our migration tools and scripts or does a fresh installation, it's a common best practice to initially have both appliances running in parallel. But many of our UTM customers wait until the last minute to migrate and are then faced with an expiring UTM/SG license and the need for their new XGS Series appliance to take over within a day. Our new solution provides partners and customers with an extended migration window while maintaining uninterrupted protection.

How does it work?

• Free 3-month overlap period: Your partner or distributor adds the UTM subscriptions when quoting a renewal product transition using our migration promo codes.
• Requirements: The quote must include a minimum 3-year term for Xstream Protection and meet all other promo terms to be eligible for the discount.
• Extra discount: 100% discount will be applied to the 3-month overlap period (in addition to other discounts included in the promotion, if applicable).
• Benefit: Ensures a seamless transition between systems.

 

The UTM subscriptions need to be manually added to the quote and must match the existing subscriptions (and in the case of hardware, the SG Series model) that the customer owns. Apply a migration promo code to take advantage of this offer. The non-renewable, 3-month UTM license must be downloaded from MyUTM and applied in the usual way.

 

How to get the 3-month free overlap

Promo discounts are only available via Sophos partners. Our partners define the pricing of all products, and some may not participate in our promos, or there may be regional or model exclusions.

For customers migrating to XGS Series hardware from either an SG Series appliance or UTM SW/virtual, the discount will be added to our existing promo codes:

• SG_XGS_3Y_Xstream_Central (DACH and Eastern Europe)
• SG_XGS_3Y_Xstream_APAC (ANZ-ASEAN-GC)
• SG_XGS_3Y_Xstream_ROW (Rest of EMEA, AMERS)

 

For customers migrating from UTM SW/virtual to SFOS SW/virtual, a new promo code will be available from June 18 to provide the same 3-month overlap incentive:

• UTMSW_REFRESH_3M_GLOBAL

Example: SG to XGS

Customer with SG 330 and FullGuard who is moving to an XGS 3300 with Xstream Protection using the appropriate SG_XGS_3Y_Xstream_xxx promo code. 

If there are multiple UTM/SG subscriptions:

• Choose one to do the transition to Xstream Protection (as shown above)
  • Delete any additional UTM/SG renewal quote lines.
  • Once done, add the UTM/SG subscriptions your customer requires as new line items and adjust the end date to select a 3-month term.

Eligibility Requirements

• Offer valid from June 18 to March 31, 2026.
• The Sophos UTM term must not extend beyond the EOL date on June 30, 2026.
• The free 3-month term is optional and is exclusively available when using our official migration promo codes for Sophos Firewall transitions. No other terms or usage are allowed.
• The purchase must include a minimum 3-year term for Xstream Protection.
• The quote/order must comply with all existing migration promo terms.
• This offer is available for renewal product transitions only and does not apply to amend and extend transactions.
• The extra 3-month term is available for both hardware and software-only/virtual migrations.
• All other use of the 3-month UTM terms is prohibited and will lead to the cancellation of the quote/order.

Frequently Asked Questions

What are the next Sophos UTM lifecycle milestones? 

• June 30, 2025:  Final order date for a 1-year renewal
• Dec 31, 2025:   Final renewal date
• June 30, 2026:  End of life

Renewals must not extend the term beyond the end-of-life (EOL) date.

From January 1, 2026, it will no longer be possible to renew Sophos UTM subscriptions.

The EOL date applies to all versions of Sophos UTM (incl. UTM on AWS).

See the Retirement calendar.

What are the current options for Sophos UTM (SG) customers?

The current options are:

1. [Until Dec 31. 2025 only] Renew existing UTM subscriptions
   • Since May 1, 2025, it is not possible to order terms of less than 6 months
   • Terms must not extend beyond the EOL date (June 30, 2026)
2. Upgrade to Sophos Firewall
   
   • Discounts are available using our promos (check with your local Sophos partner for further details).

FAQs for the 3-month overlap incentive

How do I get an extra 3 months of UTM term for me/my customer?

When you do a renewal product transition from Sophos UTM to Sophos Firewall (SFOS) using one of our migration promos, the UTM subscriptions can be added to the same quote with a 3-month term, and 100% discount will be applied to those quote line items.

The quote must comply with all other promo terms, e.g., minimum 3-year term for Xstream Protection.

 

How long will this offer be available?

From June 18, 2025 to March 31, 2026.

If the 3-month term extends the license beyond the EOL date, it will not be possible to process the order.

 

Are all UTM subscriptions eligible for this offer?

All UTM subscriptions with a valid product transition in our system are eligible for this offer, provided the opportunity fulfills all other promo terms.

The only subscription with no valid transition is currently UTM Wireless Protection, as a) Wireless Protection is included in the Base License for SFOS, and b) there are no current access points sold for firewall management. However, customers using APX Series access points on the UTM can transfer them to Sophos Firewall, and no additional license will be required. The EOL date for APX is December 31, 2027.

What if the customer has multiple subscriptions?

If your customer owns UTM Network Protection and UTM Web Protection, for example, you can add separate quote lines with a 3-month term for each of those.

If there are multiple UTM/SG subscriptions:

• Choose one to do the transition to Xstream Protection (as shown in the table above)
  • Delete any additional UTM/SG renewal quote lines.
  • Once done, add the UTM/SG subscriptions your customer requires as new line items and adjust the end date to select a 3-month term.

The UTM subscriptions must match what the customer currently owns, and in the case of hardware, must match the SG model that the customer currently has. If the customer owns three UTM subscriptions and is only using two of them, you can also just add the two that are still required.

 

When will the 3-month UTM subscriptions start?

For pre-quoted on-time or early renewals, the start date for both the Xstream Protection subscription and the 3-month UTM subscription(s) will be 1 day after the original UTM expiration.

A different start date may apply for late renewals, especially those where the license has lapsed by more than 30 days.

 

Which promo codes are available and what discounts do they offer?

All discounts are subject to change via our partners, who define the pricing for all products. 

SG Series migration promo codes:

Use when transitioning to XGS Series hardware (from SG Series or UTM SW/Virtual):

 

SG_XGS_3Y_Xstream_Central (EMEA Central only, DACH, Eastern Europe)

• 50% discount on XGS 88(w), 99% discount on all other XGS models, plus 1% discount on Xstream Protection
• Optional: 100% discount on 3-month terms for existing Sophos UTM subscriptions
• Optional (using the promo code WSP_CEMA_3Y_Xstream_Central): 100% discount on a 3-year term for Webserver Protection, 60% discount on a 3-year term for Central Email Advanced.

                 

SG_XGS_3Y_Xstream_APAC (ANZ-ASEAN-GC)

• 99% discount on all XGS models, plus 1% discount on Xstream Protection
• Optional: 100% discount on 3-month terms for existing Sophos UTM subscriptions
• Optional (using the promo code GLOBAL_WSP_CEMA_3Y_Xstreaml): 100% discount on a 3-year term for Webserver Protection, 60% discount on a 3-year term for Central Email Advanced.

 

SG_XGS_3Y_Xstream_ROW (Rest of EMEA, AMERS)

• 50% discount on XGS 88(w), 99% discount on all other XGS models, plus 1% discount on Xstream Protection
• Optional: 100% discount on 3-month terms for existing Sophos UTM subscriptions
• Optional (using the promo code GLOBAL_WSP_CEMA_3Y_Xstreaml): 100% discount on a 3-year term for Webserver Protection, 60% discount on a 3-year term for Central Email Advanced.

 

UTM SW/Virtual migration promo code (new from June 18):

Use when transitioning from UTM SW/Virtual to SFOS SW/Virtual:

UTMSW_REFRESH_3M_GLOBAL

• Requires the purchase of a 3-year term for Xstream Protection (SFOS SW/Virtual)
• 100% discount on 3-month terms for existing Sophos UTM SW/Virtual subscriptions

 

Which migration paths are supported?

The following transitions are possible:

1. Hardware (SG) to Hardware (XGS) – use an SG_XGS… promo code
2. UTM SW/Virtual to Hardware (XGS) – use an SG_XGS… promo code
3. UTM SW/Virtual to SFOS SW/Virtual – use the UTMSW_REFRESH… promo code

What type of license will I get for the 3-month term, and how do I apply it?

For each 3-month subscription, you will receive an upgrade key that you will need to apply to the license in MyUTM (ensure that the license matches the appliance model).

• Click Apply Upgrade Key.
• Enter the key in the pop-up window that appears, and click OK - show preview

• A License Upgrade Preview appears that shows the subscriptions and the new end date. Click OK - apply changes.

• Once you complete this process for all subscriptions, click Download License File.

• Save the license file to your computer and then upload it to your UTM appliance.

Can I order the extra 3-month UTM term without using the promo?

No. The 3-month UTM subscription terms may only be used in combination with a migration from UTM to SFOS using a promo code.

 

Can I order the 3-month subscription term to extend a UTM contract without upgrading to XGS?

No. The 3-month subscription terms may only be used in combination with a migration from UTM to SFOS using a promo code.

 

How do I transition subscriptions that are not part of Xstream Protection, e.g., Webserver Protection?

Due to the different scope of the licenses, you may need to add more than one line item. For example, Webserver Protection was included in FullGuard but is not included in Xstream Protection. In this case, you will need to add both Xstream Protection (if using the promo) and Webserver Protection to retain this functionality.

In some cases, Sophos ZTNA may deliver the functionality that the customer requires. Please check with your local Sophos team for further details.

 

What can I do if the promo code is not applying the discount?

Check the following:

• Are you using a valid promo code for your region?
• Does the quote comply with the promo terms?
• Are you ordering a minimum 3-year term for Xstream Protection?
• Have you removed any additional renewal line items that are no longer needed, and added the UTM subscriptions as new line items with a 3-month term?
• Does the term extend beyond the EOL date?
• For hardware: Have you added the XGS appliance and the power cord?
• For SW/virtual: Are all subscriptions on the quote for SW/Virtual?

For all other questions, please reach out to your local Sophos partner or account manager. Partners should reach out to their local Sophos distributor or account manager.