Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=administration-licensing-transfer

Transfer licenses to another firewall

When you transfer licenses from one firewall to another, you also transfer licenses from one serial number to another.

You must verify the serial numbers of the old and new firewalls when you enter them in Sophos Central.

When you replace an older model with a newer one or replace a faulty device through the RMA process, you must claim the new firewall and transfer the licenses from the existing device to the new one.

When to transfer

You must transfer your license to another firewall in some cases.

Hardware appliances

A few instances in which you must transfer the firewall license to another firewall are as follows:

  • Active-passive HA: If you assigned the licenses to the auxiliary device instead of the Initial primary, you must transfer the licenses to the primary device. See Transfer licenses in HA devices.
  • Incorrect firewall: Licenses were assigned to an incorrect serial number.
  • Replacement of an older model: You're replacing an older model with a new one.
  • RMA: You replaced a device through the Return Merchandise Authorization (RMA) process, but the license wasn't automatically transferred when you claimed the replacement device. See Claim an RMA firewall.

Virtual appliances

Your virtual appliance uses a free trial license. If you placed an order for a paid-for license, you must mention the serial number in the order. You must attach the paid-for license to the free trial device's serial number.

To extend a trial license or get a paid license, give the firewall's serial number to Sophos during order processing. The transfer is automatically done and appears in Sophos Central.

Regular replacement

When you replace an older model with a newer one, you must claim the new firewall in your Sophos Central account and transfer the paid-for license from the existing firewall to the new one. For more information, see the following documents:

RMA replacement

The RMA process lets you return a defective hardware device for replacement. See RMA process.

When you complete the license transfer from the faulty to the replacement device, the faulty device is automatically deregistered.

Note

Complete the license transfer and check that the faulty device is deregistered before you return the faulty device to Sophos.

License transfer to the replacement device can be automatic or manual.

Automatic license transfer

When you claim the replacement device through your Sophos Central account and Sophos Central detects the device's RMA case, it shows the automatic license transfer screen. See Claim an RMA firewall.

Make sure the faulty device's serial number shown in Sophos Central is correct.

Manual license transfer

Automatic license transfer won't take place in the following cases:

  • The registrants for the faulty and replacement devices aren't the same.
  • The serial number of the faulty or replacement devices was inaccurately recorded in the RMA case. You either received an incorrect serial number or Sophos recorded an incorrect one.
  • The replacement device isn't the same appliance model as the faulty device.
  • The faulty device wasn't registered.

You must claim the replacement device and then transfer the licenses if your Sophos Central account doesn't show the automated license transfer screen for the RMA case. See the following documents:

  1. Claim a firewall.
  2. Transfer subscriptions between firewalls.

If you face an issue transferring the license, contact Sophos Support. See Contact Sophos Support.