Firewall license renewals, upgrades, and replacements

When you renew your subscriptions, you must make sure your order includes the serial number of the firewall the subscription is running on. If you bought an XGS Series appliance and Xstream Protection bundle, you must purchase Xstream Protection. If you originally bought an XG Series Protect bundle using the legacy licensing scheme, your license will have been migrated to the new licensing scheme. To renew all subscriptions from your original purchase, you may need to select more than one product. For example, if you originally purchased TotalProtect Plus, to retain the same feature set when you renew, purchase Xstream Protection plus Email Protection and Web Server Protection as individual subscriptions.

When you renew, depending on your country, your license schedule will either show a license key that you need to activate or will show that your renewal has already been activated. Make sure you read the license schedule when it's sent to you and activate any license keys shown on it.

The start date for the renewal will be the day after the expiry of the existing subscription. The exception to this is if the previous subscription expired before the renewal was activated. In this case, the renewal subscription will normally start from the date of activation but may occasionally be backdated. For details, see Activating firewall license keys FAQ.

If you want to upgrade the products you're running in the middle of the term, you need to request a quote from your reseller. You'll receive an allowance for the remainder of the subscriptions, which will reduce the cost of the new subscriptions you purchase.

When a mid-term change is activated, the new subscription will start immediately, and the remainder of your existing subscription will be canceled unless you request a future start date. You'll need to activate the key shown on the license schedule unless it has been activated for you.

You can't downgrade a subscription mid-term.

Yes. You can add a new subscription that's the same as an existing subscription, or has features in common with an existing subsciption. Here are some example scenarios:

• Suppose you have trial subscriptions for Xstream Protection, Email Protection, and Web Protection that start on January 22, 2025, and end on February 21, 2025. You activate a paid subscription for Xstream Protection that starts on January 22, 2025 and ends on February 21, 2026. You won't get any warnings, and the Xstream Protection expiry date changes to February 21, 2026.
• Suppose you have a paid subscription for Standard Protection that starts on January 22, 2025 and ends on February 21, 2025. You want to activate a paid subscription for Xstream Protection that starts on January 22, 2025, and ends on February 21, 2026. On the Apply subscription screen, you'll see the following warning: "This key contains subscriptions that overlap with existing subscriptions". When you click Apply subscription, you'll see a confirmation message: "This key adds subscriptions that overlap with existing subscriptions. Do you want to apply this key anyway?". When you click Yes, the subscriptions all show as Xstream Protection, and the expiry date changes to February 21, 2026.

You can also transfer a subscription from one firewall to another if it overlaps with the destination firewall's existing subscription. See Transfer subscriptions between firewalls.

See Claim an RMA firewall.

You can't adjust virtual firewall sizes if you have a termed license unless you have an MSP termed license. This is because the size of the virtual firewall is tied to the base license when you purchase a termed license.