NSM Licensing FAQ

NSM SaaS

What are the changes to GEN7 Licenses for NSM SaaS?

• NSM SaaS will offer four new tiers of Advanced Reporting and Analytics Licenses. They are 7 days, 30 days, 90 days, and 365 days of NSM Advanced Reporting and Analytics.
• Device Management is included with NSM Advanced Licenses for all tiers
• NSM Essential as an à la carte license will no longer be available for purchase.  Included with the Firewall EPSS bundle.

What changes are coming to Firewall bundles? Which Firewall bundles will include NSM SaaS?

• The following table outlines the changes to the firewall bundles. You must purchase the new firewall bundle SKUs for management, reporting, and analytics
  

  Buying Options	SaaS Management	SaaS Reporting
  Hardware Only	None	None
  HW + Support	Included	None
  HW + EPSS	Included	Basic Reporting
  HW + APSS	Included	7-days of SaaS Advanced Reporting
  HW + MPSS	Included	30-days of SaaS Advanced Reporting

What are the Add-On options for NSM SaaS?

• The following table outlines the add-on options
  

  Buying Options	Upgrade Options for Advanced Reporting
  Hardware	7, 30, 90, 365 days of SaaS Advanced Reporting and Analytics
  HW + Support	7, 30, 90, 365 days of SaaS Advanced Reporting and Analytics
  HW + EPSS	7, 30, 90, 365 days of SaaS Advanced Reporting and Analytics
  HW + APSS	30, 90, 365 days of SaaS Advanced Reporting and Analytics
  HW + MPSS	90, 365 days of SaaS Advanced Reporting and Analytics

Can I see a comparison between the old and the new NSM licenses?

NSM On-Prem

I am a new Partner. I want NSM On-Prem with management, reporting, and analytics. What do I need to purchase?

• Purchase the NSM 5-node Base license.
• Purchase the NSM On-Prem Advanced reporting and analytics license for each firewall model.
• For each firewall model, you will enable a reporting and analytics license; one node management license is given at no additional cost with an active firewall support license.

What are the changes to GEN7 Licenses for NSM On-Prem?

• NSM On-Prem will offer two new tiers of Reporting and Analytics Licenses: 7 days and 365 days of NSM Reporting and Analytics.
• There is no basic reporting for NSM On-Prem.
• The Reporting and Analytics license for NSM On-Prem is applied per the FW model level.

I am a current NSM On-prem customer with firewall management only. Can I upgrade my NSM installation with Management, Reporting, and Analytics?

• Yes. You must purchase each firewall's NSM Reporting and Analytics SKUs using their model.

What changes are coming to Firewall bundles? Which Firewall bundles will include NSM On-Prem?

• The following table outlines the changes to the firewall bundles. You must purchase the new firewall bundle SKUs for management, reporting, and analytics.
  

  Buying Options	On-Prem Management	On-Prem Reporting
  Hardware Only	None	None
  HW + Support	Included	None
  HW + EPSS	Included	None
  HW + APSS	Included	7-days of SaaS or NSM on-prem Advanced Reporting

What are the Add-On options for NSM On-Prem?

• The following table outlines the add-on options:
  

  Buying Options	Upgrade Options for Advanced Reporting
  Hardware	7, 365 days of NSM On-prem Advanced Reporting and Analytics
  HW + Support	7, 365 days of On-Prem Reporting and Analytics
  HW + EPSS	7, 365 days of On-Prem Reporting and Analytics
  HW + APSS	365 days of On-Prem Advanced Reporting and Analytics

I want to deploy NSM On-Prem in a distributed architecture. Do I need to purchase a license for each agent I deploy?

• No. Purchase the NSM 5-node Base license.
• Purchase the NSM On-Prem Advanced reporting and analytics license for each firewall model.
• You only need to purchase an NSM On-Prem license for the firewall model under NSM management.
• The management license is given for each firewall model at no additional cost.

I already have NSM On-Prem deployed. I want to enable it for reporting and analytics.

• Purchase the NSM On-Prem Advanced reporting and analytics license for each firewall model.

Are SaaS and On-Prem reporting SKUs the same?

• No, SaaS and On-Prem reporting SKUs are different. You must purchase the correct SKU based on your deployment model.

Can I get analytics from next-generation firewall devices, including TZ80, NSa 2800, and NSa 3800, in on-prem analytics?

• Yes

Is NSM 3.0 On-Prem compatible with the TZ80 firewall?

• Yes, the TZ80 is supported in NSM 2.6 and 3.0.

Is NSM On-Prem supported on Nutanix?

• KVM-based deployment on Nutanix is supported. Native AHV support is under future evaluation.

Can NSM 2.x upgrade to 3.0 via firmware alone?

Yes, upgrading from NSM 2.6.0-HF1 to 3.0 is supported via system update. Follow the official upgrade instructions.

NSM General

How will existing Gen 7 customers transition to the new licensing?

• Activating or renewing any new firewall license key will transition the customer’s Gen 7 firewall to the latest 3.0 licensing model. The associated services will be renewed according to the new key, and any remaining service time from the previous license will be carried over and added to the new term, just as it currently works when a customer renews their firewall bundle or service. Firewalls with active support will automatically receive NSM SaaS Management as part of their active support services.
  The table below captures high-level expected behavior.
  

  Current Service	New license post transition
  Firewall with a security bundle (e.g. TPSS, EPSS, APSS)	TPSS, EPSS Firewalls - SonicWall is gradually rolling out NSM Management licensing (excluding reporting) to these firewalls. This rollout process may take up to 60 days from May 1st. Action required: Customers will have to manually switch the firewall management to 'Cloud' to start using this NSM Management. Learn how to here. APSS Firewalls – These firewalls already have NSM Management and Reporting included and are not part of the gradual roll out. Note: Any firewall using the old licensing model will automatically transition to the new licensing if a renewal key is applied prior to the gradual rollout mentioned above.
  Firewall with a security bundle + NSM Essential or Advanced	When a renewal key is applied, the firewall will transition to the new security bundle with services included in the bundle and the remaining value of old NSM added under reporting. e.g. Old EPSS will convert to new EPSS with NSM Management and 7 days of  Basic Reporting (NSM SaaS only). Old APSS will convert to new APSS with NSM Management and 7 days of Advanced Reporting. NSM Advanced will co-term and upgrade the reporting to 365 days of Advanced Reporting.
  Firewall with NSM only and no security bundle	When a renewal key is applied, it will transition to the new licensing with NSM Management and remaining value of old NSM added under reporting. - e.g. NSM Advanced will convert to 365 days of Advanced Reporting.
  Firewall with Active Support only (No other security bundle or NSM)	SonicWall is gradually rolling out NSM Management licensing (excluding reporting) to these firewalls. The rollout process may take up to 60 days from May 1st. Action required: Customers will have to manually switch the firewall management to 'Cloud' to start using this service. Learn how to here.
  Firewall with no service or support	No change will occur until a new key is applied to the firewall.

Note: Starting in May 2025, customers using monthly-billed licenses will be automatically migrated to and billed for the new licensing.

I have a Firewall with an NSM Essential License that will expire in one year.  Can I upgrade my firewall to the new NSM Advanced license tiers?

• You can apply the new NSM Advanced License SKU to an existing firewall with an NSM Essential License. 

What happens to the remaining term of the NSM Essential license?

• A multiplier calculates the remaining value of the existing NSM Essential license, which is then applied to the new NSM Advanced license.

I have a Firewall with an NSM Advanced License. Can I downgrade the NSM Advanced license to a lower tier?

• You can downgrade to a lower tier of the NSM Advanced license. 

What happens if my NSM Essential or Advanced subscription expires? Can I still upgrade NSM features?

• If your NSM Essential or Advanced subscription expires, you must either purchase Co-term or renew your EPSS or APSS (even if it's already licensed) to regain access to upgrade NSM features. This is the only way to enable feature upgrades once the subscription has lapsed.

How is the new licensing different from the old licensing bundles? 

• The new licensing bundles are modular and tailored, offering enhanced flexibility and scalability. Unlike the old licensing, customers can choose specific features and services using the system's more rigid bundles.

Are SaaS and On-Prem reporting SKUs the same?

• No, SaaS and On-Prem reporting SKUs are different. Customers must purchase the correct SKU based on their deployment model.

What happens if reporting is active on the On-Prem FW and the customer moves to SaaS?

• The reporting duration will not automatically be transferred from On-Prem to SaaS. Customers must request this adjustment via a Customer Support (CS) case.

What happens if the customer transitions to the new licensing and tries to apply an old key?

• Once transitioned to the new licensing, customers cannot renew or apply old keys.

Does activating a new add-on, Advanced Reporting and Analytics, log retention SKUs, convert the license to the new licensing model?

• No, activating an add-on SKU alone does not convert to the new licensing. Customers must first purchase a base security bundle or support bundle, along with any add-on Advanced Reporting and Analytics log retention SKUs, to get the new licensing.

How is add-on reporting co-termed, and how is the new end date calculated?

• When additional licenses or services are purchased as add-ons, they are co-termed with the primary license. The new expiration date is calculated based on a prorated adjustment of the add-on's duration, aligning with the existing license term to ensure a seamless renewal process.

What happens when converting from APSS + NSM Advanced with limited days remaining to a new 3-year APSS?

• NSM uses an equity-based co-terming model. If the new license is of higher value, the term may be slightly adjusted to account for the remaining days. Customers generally gain value during the transition.

Can customers stack NSM reporting licenses (e.g., 7 days + 30 days)?

• Stacking follows MySonicWall’s legacy logic. Equity conversion models apply. For the exact duration of math, consult support with license combinations.

What’s included in the MPSS bundle? 

• Managed Firewall configuration, alerts & notifications, firmware upgrades, patches, and after-hours support. Learn more

Can MPSS (Managed Protection Subscription Service) be used with NSM On-Prem?

• No, MPSS is designed exclusively for NSM (Network Security Manager) SaaS use.
  Here’s how the scenarios work:
• NSM On-Prem:
  
  • If you are using an on-premises NSM deployment, the MPSS SKU cannot be applied.
  • To use MPSS, you must transition to NSM SaaS. Once on SaaS, you can implement MPSS and make any necessary adjustments to your configuration.
• NSM SaaS:
  • It fully supports MPSS integration, allowing you to maximize the benefits of the service.

Can customers buy APSS + On-Prem reporting instead of full NSM SaaS?

• Yes, à la carte On-Prem reporting and analytics can be added to APSS.

Are older Syslog & IPFIX licenses still available?

• Yes, they are on the price list, but not included in the new bundles. Customers should transition to NSM On-Prem

GMS to NSM

How is NSM licensing different from GMS?

• GMS software is a perpetual license and requires you to purchase a subscription for support.
  • Licensed based on # of nodes managed
• NSM is a subscription license that includes support.
  • Licensed based on # of nodes managed for management only
  • Licensed per FW model for reporting and analytics. Includes management

Refer to the datasheet for licensing details.

Are any discounts or software transition offers available to transition from GMS to NSM?

• Yes, refer to the “Transition Programs” section in the FAQ document for details on the available offers and programs.

I have unused node licenses in GMS. Will they be moved to NSM?

• No, no unused nodes on GMS will be moved to NSM. Only firewalls with active support are eligible for transition to NSM.

What happens to my existing GMS licenses after EOS/EOL?

• If your GMS product is EOS, you may continue to use your licenses until the support ends. After the EOL date, no updates will be provided, but your existing licenses will remain functional for the version of GMS you are running.

If I have GMS and Essentials-bundled firewalls, do they need to purchase a base NSM On-Prem license before adding NSM licenses?

• Yes, the customer must first purchase the NSM 5-node Base License. Nodes licensed through EPSS/APSS do not require additional payment.