Main Menu
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Events
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • SonicWall Promotions
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
SonicWall
  • Products
      All Products A–Z
      Free Trials
    • Network Security
      • Next-Generation Firewall (NGFW)
      • Network Security Services
      • Network Security Management
      • Secure SD-WAN
    • Threat Protection
      • Advanced Threat Protection Cloud
      • Advanced Threat Protection Appliance
      • Capture Labs
    • Secure Access Service Edge (SASE)
      • Zero-Trust Network Access (ZTNA)
    • Cloud Security
      • Cloud Firewall
      • Cloud App Security
    • Endpoint Security
      • Endpoint Detection & Response (EDR)
    • Email Security
      • Cloud Email Security
      • Hosted Email Security
      • On-Prem Email Security
    • Secure Access
      • Wireless Access Points
      • Network Switch
      • Virtual Private Network (VPN)
    • Wi-Fi 6 Access Points

      SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.

      Read More
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Network Segmentation
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure Wi-Fi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Events
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Events
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • SonicWall Promotions
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • English English English en
  • BLOG
  • CONTACT SALES
  • FREE TRIALS
  • English English English en
SonicWall
  • Products
      All Products A–Z
      Free Trials
    • Network Security
      • Next-Generation Firewall (NGFW)
      • Network Security Services
      • Network Security Management
      • Secure SD-WAN
    • Threat Protection
      • Advanced Threat Protection Cloud
      • Advanced Threat Protection Appliance
      • Capture Labs
    • Secure Access Service Edge (SASE)
      • Zero-Trust Network Access (ZTNA)
    • Cloud Security
      • Cloud Firewall
      • Cloud App Security
    • Endpoint Security
      • Endpoint Detection & Response (EDR)
    • Email Security
      • Cloud Email Security
      • Hosted Email Security
      • On-Prem Email Security
    • Secure Access
      • Wireless Access Points
      • Network Switch
      • Virtual Private Network (VPN)
    • Wi-Fi 6 Access Points

      SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.

      Read More
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Network Segmentation
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure Wi-Fi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Events
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Events
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • SonicWall Promotions
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • Menu

SMA Secure Upgrade Program Guide and PLC Updates

07/13/2021 18 People found this article helpful 196,230 Views

    Download
    Print
    Share
    • LinkedIn
    • Twitter
    • Facebook
    • Email
    • Copy URL The link has been copied to clipboard

    Description

    • SMA100 series Gen5 Hardware SRA 1600/4600 reached End-Of-Support on 1st November 2019
    • SMA1000 series Gen5 Hardware EX6000/7000 reached End-Of-Support on 1st November 2019

      TIP: For details, please refer to: https://www.SonicWall.com/support/product-Lifecycle-tables/SonicWall-secure-mobile-access/hardware


    For business continuity and support from SonicWall after 1st November 2019:

    • Customers with SMA100 Series SRA 1200/4200/1600/4600 appliances in their deployment MUST upgrade to SMA100 series Gen7 210/410 hardware or SMA500v
    • Customers with SMA1000 Series EX 6000/7000/9000 appliances MUST upgrade to SMA1000 series Gen7 6210/7210 hardware or SMA8200v. A CMS based deployment is highly recommended to reap the benefits of central user licensing, global HA and optimal total cost of ownership.

      TIP: For details on ACTIVELY SUPPORTED SMA100 and SMA1000 series firmware, please refer to https://www.SonicWall.com/support/product-lifecycle-tables/SonicWall-secure-mobile-access/software/


    Resolution

    NOTE: Default user licenses that came as part of the SMA 100/1000 series hardware are NOT eligible for transfer as part of Secure Upgrade Program.


    SMA1000 Series Secure Upgrade Planning

    • Decide on the new deployment model (e.g. hardware appliance or virtual appliance, central management with Global HA). See list of Upgrade Options below.
    • Purchase the appropriate SMA 1000 Secure Upgrade Program (SUP) package. See list of Secure Upgrade Plus SKUs below.
    • Decide on the SMA1000 firmware version you will upgrade to. The base version on SMA1000 series hardware (SMA 6210/7210) is v12.1. The recommended version for customers is v12.4.
    • Setup a parallel SMA1000 VPN setup consisting of the new appliance(s):
    • Stand up a parallel SMA VPN with the new appliance(s) preferably with firmware version 12.4 and latest hotfix.
    • Export your configuration settings from the old SMA VPN and Import the configuration into the new SMA environment.
    • Contact SonicWall Customer Service (1.888.793.2830) to transfer user licenses and any remaining support to your new SMA environment.
    • Validate everything works as expected in your new environment.
    • Contact SonicWall Support if you have questions on setting up the new SMA
    • Migrate users to the new SMA VPN infrastructure
    • If your users are connecting with the Connect Tunnel CT client, they should upgrade the client to the new version of CT.
    • Contact SonicWall Support if you have questions on migrating users to the new SMA environment.
    • Decommission your old SMA 6000/7000 appliance(s)
    • Once you have the new SMA infrastructure operational and in Production, you should decommission the old SMA 6000/7000 appliances.
    • The old hard drives should be destroyed or zeroed-out.


    SMA1000 Upgrade Options

    • Upgrade from an SMA Hardware Appliance to an SMA Virtual Appliance: Recommended
    • The SMA 8200v runs the same firmware and has the same set of features as SMA hardware appliances
    • The Admin console and User experience is the same as hardware appliances
    • SMA 8200v may be running on VMWare ESXi or Microsoft Hyper-V or KVM or AWS or Azure
    • By running virtual SMA appliances you can leverage existing virtual infrastructure and all the high availability options that come with a virtual infrastructure and thereby reduce costs
    • Upgrade from a SMA Hardware Appliance to newer version SMA Hardware Appliance OR Virtual Appliance
    • Standalone SMA 6000/7000 to standalone SMA (6200/6210) / SMA (7200/7210) / SMA 8200v
    • Upgrade SMA HA Pair hardware to SMA Virtual Appliance SMA 8200v (on ESXi or Hyper-V or KVM or AWS or Azure)
    • Leverage the virtual/cloud infrastructure's ability to quickly restore an appliance that fails (from backup or snapshot)
    • Upgrade SMA HA Pair hardware to CMS with Global HA (and Disaster Recovery)
    • The HA Pair model is no longer supported has been replaced by CMS with Global HA
    • Upgrade HA Pair of SMA 6000 or 7000 to CMS with SMA 8200v (on ESXi or Hyper-V or KVM or AWS or Azure) - RECOMMENDED
    • Upgrade HA Pair of SMA 6000 or 7000 to CMS with SMA 6200/6210 or 7200/7210 or 8200v(or any combination of HW and virtual appliances)


    SMA1000 Transfer of Licenses and Support

    • As part of the Secure Upgrade Program existing user licenses and any remaining Support can be transferred to the new installation.
    • Possible user license transfers are:
    • User licenses on SMA 6000/7000 transfer to SMA 6200/6210/7200/7210/8200v.
    • User licenses on SMA 6000/7000 transfer to CMS as perpetual pooled licenses.
    • User licenses on SMA HA Pair can transfer to SMA 6200/6210/7200/7210/8200v, or to CMS as as perpetual pooled licenses.
    • SMA user licenses transfer at at 1:1 ratio. For example:
    • 100 user licenses on standalone SMA 6000/7000 transfer as 100 user licenses on SMA 6200/6210/7200/7210/8200v.
    • 100 user licenses on standalone SMA 6000/7000 transfer as 100 CMS Pooled Perpetual user licenses.
    • 100 user licenses on HA Pair (50 on each SMA node) transfer as 100 user licenses on SMA 6200/6210/7200/7210/8200v, or 100 CMS Pooled Perpetual user licenses.
    • Remaining support transfer at 1:1 ratio. For example:
    • 6 months of remaining Support on standalone SMA 6000/7000 transfer as 6 months of Support on SMA 6200/6210/7200/7210/8200v.
    • 6 months of remaining Support on standalone SMA 6000/7000 transfer as 6 months of CMS Pooled Perpetual Support (for equivalent number of user licenses).


    SMA1000 Secure Upgrade Plus Program SKUs

    • 02-SSC-0860: SMA 8200v SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 1 YR
    • 02-SSC-0862: SMA 8200v SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 3 YR
    • 02-SSC-0394: SMA 6200/6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 1 YR
    • 02-SSC-0395: SMA 6200/6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 3 YR
    • 02-SSC-0396: SMA 7200/7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 1 YR
    • 02-SSC-0397: SMA 7200/7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 3 YR
    • 02-SSC-2895: SONICWALL SMA 7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 1YR
    • 02-SSC-2896: SONICWALL SMA 7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 3YR
    • 02-SSC-2893: SONICWALL SMA 6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 1YR
    • 02-SSC-2894: SONICWALL SMA 6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 3YR

      NOTE: There is no separate secure upgrade SKU for CMS

     

    Other SMA1000 Upgrade Considerations

    • The old HA Pair (EX6000/7000/9000) model is no longer supported. The new HA model is Global HA with CMS.
    • If end-users use the Connect Tunnel client, they should upgrade the client as well.
    • If you are using EPC (Endpoint Control) you will need to transition from OPSWAT v3 to OPSWAT v4
    • Capture ATP and FIPS ADD-ON (CMS and SMA) are NOT eligible for transfer during the Secure Upgrade process.
    • Customers with EX9000 can upgrade to one or more units of SMA 7200/7210
    • For license transfer through Customer Support, please provide the existing license count/support validity.
    • In the event of mismatch between existing SMA license/support and new CMS license/support, the highest license count/support validity will be taken into consideration.
    • For remote implementation support of NEW/SUP CMS/SMA deployment, please purchase the following SKU: 01-SSC-4357 SONICWALL REMOTE IMPLEMENTATION SMA 1000 SERIES.


    SMA 100 Series Secure Upgrade Program Steps

    Planning

    • Decide on the new deployment model (e.g. hardware appliance or virtual appliance. See list of Upgrade Options below.
    • Purchase the appropriate SMA 100 Secure Upgrade Program (SUP) package. See list of Secure Upgrade Plus SKUs below.
    • The recommended firmware version for SMA100 series customers is v10.2+ latest patches.
    • Setup a parallel SMA100 VPN setup consisting of the new appliance(s):
    • Stand up a parallel SMA VPN with the new appliance(s) preferably with SMA100 series firmware version 10.2 + latest patch.
    • Export your configuration settings from the old SMA VPN and Import the configuration into the new SMA environment.
    • Contact SonicWall Customer Service (1.888.793.2830) to transfer user licenses and any remaining support to your new SMA environment.
    • Validate everything works as expected in your new environment.
    • Contact SonicWall Support if you have questions on setting up the new SMA
    • Migrate users to the new SMA VPN infrastructure
    • If your users are connecting with the NetExtender (NX) client, they should upgrade the client to the new version of NetExtender (NX)
    • Contact SonicWall Support if you have questions on migrating users to the new SMA environment.
    • Decommission your old SRA 1200/4200/1600/4600 appliance(s)
    • Once you have the new SMA infrastructure operational and in Production, you should decommission the old SRA 1200/4200/1600/4600 appliance(s).
    • The old hard drives should be destroyed or zeroed-out.


    SMA100 Series Secure Upgrade Options

    • Upgrade from an SMA Hardware Appliance to an SMA Virtual Appliance: RECOMMENDED
    • The SMA 500v runs the same firmware and has the same set of features as SMA hardware appliances
    • The Admin console and User experience for SMA500v is the same as hardware appliances
    • SMA 500v may be running on VMWare ESXi or Microsoft Hyper-V or KVM or AWS or Azure
    • By running virtual SMA appliances you can leverage existing virtual infrastructure and all the high availability options that come with a virtual infrastructure and thereby reduce costs
    • Upgrade from a SMA Hardware Appliance to newer version SMA Hardware Appliance OR Virtual Appliance
    • Standalone SRA 1200/4200/1600/4600 to standalone SMA (200/210) / SMA (400/410) / SMA 500v
    • Upgrade SRA HA Pair hardware (4200/4600) to SMA Hardware (SMA 400/410) OR Virtual Appliance SMA 500v (on ESXi or Hyper-V or KVM)
    • Leverage the virtual/cloud infrastructure's ability to quickly restore an appliance that fails (from backup or snapshot)


    SMA100 Series Transfer of Licenses and Support

    • As part of the Secure Upgrade Program existing user licenses and any remaining Support can be transferred to the new installation.
    • Possible user license transfers are:
    • User licenses on SRA 1200/4200/1600/4600 appliance(s) (Standalone OR HA pair) transfer to SMA 200/210/400/410/500v appliance(s)
    • SMA user licenses transfer at 1:1 ratio. For example:
    • 50 user licenses on SRA 1200/4200/1600/4600 standalone appliance(s) transfer as 50 user licenses on SMA 200/210/400/410/500v appliance(s)
    • 50 user licenses on SRA 4200/4600 HA pair appliances transfer as 50 user licenses on SMA 400/410/500v HA pair appliances
    • Remaining support transfer at 1:1 ratio. For example:
    • 6 months of remaining Support on SRA 1200/4200/1600/4600 standalone appliance(s) transfer as 6 months of support on SMA 200/210/400/410/500v appliance(s)
    • 6 months of remaining Support on SRA 4200/4600 HA pair appliances transfer as 6 months of support on SMA 400/410/500v HA pair appliances

     

    SMA100 Series Secure Upgrade SKUs

    • 02-SSC-2798       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 1YR
    • 02-SSC-2799       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 3YR
    • 02-SSC-2796       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 1YR
    • 02-SSC-2797       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 3YR
    • 02-SSC-2794       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 25USER 1YR
    • 02-SSC-2795       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 25USER 3YR
    • 02-SSC-2792       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 26-50USER 1YR
    • 02-SSC-2793       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 26-50USER 3YR
    • 02-SSC-2807       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 1YR
    • 02-SSC-2808       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 3YR
    • 02-SSC-2810       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 1YR
    • 02-SSC-2809       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 3YR

      NOTE: After completing the above steps please work with our Customer Service team (1-888-793-2830) to transfer license and support.

    Other SMA100 Series Upgrade Considerations

    • If end-users use the NetExtender (NX) client, they should upgrade the client as well.
    • If you are using EPC (Endpoint Control) you will need to transition from OPSWAT v3 to OPSWAT v4
    • For license transfer through Customer Support, please provide the existing license count/support validity.
    • In the event of mismatch between existing SMA license/support and new CMS license/support, the highest license count/support validity will be taken into consideration.
    • For remote implementation support of NEW/SUP CMS/SMA deployment, please purchase the following SKU: 01-SSC-8532 SONICWALL REMOTE IMPLEMENTATION SMA 100 SERIES  

    Related Articles

    • Printer Redirection with RDP through Secure Mobile Access
    • EPC check based on Windows version
    • SMA1000: How to manage Connect Tunnel client Auto-updates

    Categories

    • Secure Mobile Access > SMA 1000 Series > License & Registration
    • Secure Mobile Access > SMA 100 Series > License & Registration

    Not Finding Your Answers?

    ASK THE COMMUNITY

    Was This Article Helpful?

    YESNO

    Article Helpful Form

    Article Not Helpful Form

    Company
    • Careers
    • News
    • Leadership
    • Awards
    • Press Kit
    • Contact Us
    Popular resources
    • Communities
    • Blog
    • SonicWall Capture Labs

    Stay In Touch

    • By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. You can unsubscribe at any time from the Preference Center.
    • This field is for validation purposes and should be left unchanged.
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
    • Instagram

    © 2023 SonicWall. All Rights Reserved.

    • Legal
    • Privacy
    • English
    Scroll to top