Activating NSv in a Closed Network

SonicOS 8 NSv virtual firewalls (S, M, and L) support manual keyset licensing, enabling deployment in closed or air-gapped network environments where outbound connectivity to the SonicWall License Manager (LM) and NTP servers is not permitted. These environments typically include government, defense, and federal agency networks where strict security policies prohibit internet access.

The standard SonicOS 8 NSv licensing mechanism uses a subscription-based model that requires connectivity to the License Manager and NTP servers for license validation and system clock integrity. The closed network licensing feature extends this architecture by allowing manual license key insertion via the SonicOS management interface, while maintaining enforcement controls such as license expiration handling and restricted functionality during the grace period.

Supported Models:

• NSv S (2 Cores)
• NSv M (4 Cores)
• NSv L (8 Cores)

Closed network licensing is supported for annual subscriptions only. It is not available for NSv XS, NSv S/M/L monthly subscriptions, or NSv S/M/L MSSP service models.

Goal

The closed network licensing feature enables administrators to:

• Deploy SonicOS 8 NSv (S, M, and L) in closed or air-gapped environments — Supporting customers who cannot provide internet connectivity for licensing validation.
• Maintain licensing enforcement and security integrity — Preventing misuse or manipulation of license expiration through strict validation mechanisms.
• Manually upload security signatures — Allowing offline updates of security service signatures via the SonicOS interface.
• Prevent backend server communication — Enabling administrators to block outbound connectivity to SonicWall backend servers after registration.