Download and apply an airgap license

You can download an airgap license from Sophos Central and apply it to your Sophos Firewall for use in environments without internet access. This process makes sure your firewall is licensed and functional while remaining isolated from external networks.

Requirements

• You must claim the firewall with the airgap license in Sophos Central before you deploy it in an air gap environment.

• Your Sophos account manager must approve the air gap deployment for your Sophos Firewall hardware. You can request air gap access with your account manager at the time of purchase.

  Note

  Sophos only approves air gap requests if you have a network that isn't connected to the internet and doesn't have any Sophos Firewall MSP Flex licensed firewalls.

• You must have a hardware device.

Download your airgap license

1. In Sophos Central, click your Profile icon.
2. Go to Licensing > Firewall licenses.

3. Click Download airgap license.

   

   The file will download to your default download location on your computer.

   Note

   You must apply the airgap license within 30 days of downloading it. Otherwise, you must download a new airgap license.

Enable your airgap license

1. Sign in to the firewall's CLI console.
2. Type 4 and press Enter to access the Device Console.

3. Run the following command: system airgap enable.

   This command makes the Manual license synchronization section in Administration > Licensing visible.

Apply your airgap license to the firewall

1. Sign in to the firewall's web admin console.
2. Go to Administration > Licensing.

3. Under Manual license synchronization, click Choose file and select your license file.

   

4. Click Update license.

5. You'll see your subscriptions under Module subscription details.

For more information, see Sophos Firewall: Activating licenses for air gap.