SMA Secure Upgrade Program Guide and PLC Updates

07/13/2021 18 11458

DESCRIPTION:

• SMA100 series Gen5 Hardware SRA 1600/4600 reached End-Of-Support on 1st November 2019
• SMA1000 series Gen5 Hardware EX6000/7000 reached End-Of-Support on 1st November 2019
  
  TIP: For details, please refer to: https://www.SonicWall.com/support/product-Lifecycle-tables/SonicWall-secure-mobile-access/hardware

For business continuity and support from SonicWall after 1st November 2019:

• Customers with SMA100 Series SRA 1200/4200/1600/4600 appliances in their deployment MUST upgrade to SMA100 series Gen7 210/410 hardware or SMA500v
• Customers with SMA1000 Series EX 6000/7000/9000 appliances MUST upgrade to SMA1000 series Gen7 6210/7210 hardware or SMA8200v. A CMS based deployment is highly recommended to reap the benefits of central user licensing, global HA and optimal total cost of ownership.
  
  TIP: For details on ACTIVELY SUPPORTED SMA100 and SMA1000 series firmware, please refer to https://www.SonicWall.com/support/product-lifecycle-tables/SonicWall-secure-mobile-access/software/

RESOLUTION:

NOTE: Default user licenses that came as part of the SMA 100/1000 series hardware are NOT eligible for transfer as part of Secure Upgrade Program.

SMA1000 Series Secure Upgrade Planning

• Decide on the new deployment model (e.g. hardware appliance or virtual appliance, central management with Global HA). See list of Upgrade Options below.
• Purchase the appropriate SMA 1000 Secure Upgrade Program (SUP) package. See list of Secure Upgrade Plus SKUs below.
• Decide on the SMA1000 firmware version you will upgrade to. The base version on SMA1000 series hardware (SMA 6210/7210) is v12.1. The recommended version for customers is v12.4.
• Setup a parallel SMA1000 VPN setup consisting of the new appliance(s):
• Stand up a parallel SMA VPN with the new appliance(s) preferably with firmware version 12.4 and latest hotfix.
• Export your configuration settings from the old SMA VPN and Import the configuration into the new SMA environment.
• Contact SonicWall Customer Service (1.888.793.2830) to transfer user licenses and any remaining support to your new SMA environment.
• Validate everything works as expected in your new environment.
• Contact SonicWall Support if you have questions on setting up the new SMA
• Migrate users to the new SMA VPN infrastructure
• If your users are connecting with the Connect Tunnel CT client, they should upgrade the client to the new version of CT.
• Contact SonicWall Support if you have questions on migrating users to the new SMA environment.
• Decommission your old SMA 6000/7000 appliance(s)
• Once you have the new SMA infrastructure operational and in Production, you should decommission the old SMA 6000/7000 appliances.
• The old hard drives should be destroyed or zeroed-out.

SMA1000 Upgrade Options

• Upgrade from an SMA Hardware Appliance to an SMA Virtual Appliance: Recommended
• The SMA 8200v runs the same firmware and has the same set of features as SMA hardware appliances
• The Admin console and User experience is the same as hardware appliances
• SMA 8200v may be running on VMWare ESXi or Microsoft Hyper-V or KVM or AWS or Azure
• By running virtual SMA appliances you can leverage existing virtual infrastructure and all the high availability options that come with a virtual infrastructure and thereby reduce costs
• Upgrade from a SMA Hardware Appliance to newer version SMA Hardware Appliance OR Virtual Appliance
• Standalone SMA 6000/7000 to standalone SMA (6200/6210) / SMA (7200/7210) / SMA 8200v
• Upgrade SMA HA Pair hardware to SMA Virtual Appliance SMA 8200v (on ESXi or Hyper-V or KVM or AWS or Azure)
• Leverage the virtual/cloud infrastructure's ability to quickly restore an appliance that fails (from backup or snapshot)
• Upgrade SMA HA Pair hardware to CMS with Global HA (and Disaster Recovery)
• The HA Pair model is no longer supported has been replaced by CMS with Global HA
• Upgrade HA Pair of SMA 6000 or 7000 to CMS with SMA 8200v (on ESXi or Hyper-V or KVM or AWS or Azure) - RECOMMENDED
• Upgrade HA Pair of SMA 6000 or 7000 to CMS with SMA 6200/6210 or 7200/7210 or 8200v(or any combination of HW and virtual appliances)

SMA1000 Transfer of Licenses and Support

• As part of the Secure Upgrade Program existing user licenses and any remaining Support can be transferred to the new installation.
• Possible user license transfers are:
• User licenses on SMA 6000/7000 transfer to SMA 6200/6210/7200/7210/8200v.
• User licenses on SMA 6000/7000 transfer to CMS as perpetual pooled licenses.
• User licenses on SMA HA Pair can transfer to SMA 6200/6210/7200/7210/8200v, or to CMS as as perpetual pooled licenses.
• SMA user licenses transfer at at 1:1 ratio. For example:
• 100 user licenses on standalone SMA 6000/7000 transfer as 100 user licenses on SMA 6200/6210/7200/7210/8200v.
• 100 user licenses on standalone SMA 6000/7000 transfer as 100 CMS Pooled Perpetual user licenses.
• 100 user licenses on HA Pair (50 on each SMA node) transfer as 100 user licenses on SMA 6200/6210/7200/7210/8200v, or 100 CMS Pooled Perpetual user licenses.
• Remaining support transfer at 1:1 ratio. For example:
• 6 months of remaining Support on standalone SMA 6000/7000 transfer as 6 months of Support on SMA 6200/6210/7200/7210/8200v.
• 6 months of remaining Support on standalone SMA 6000/7000 transfer as 6 months of CMS Pooled Perpetual Support (for equivalent number of user licenses).

SMA1000 Secure Upgrade Plus Program SKUs

• 02-SSC-0860: SMA 8200v SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 1 YR
• 02-SSC-0862: SMA 8200v SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 3 YR
• 02-SSC-0394: SMA 6200/6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 1 YR
• 02-SSC-0395: SMA 6200/6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 3 YR
• 02-SSC-0396: SMA 7200/7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 1 YR
• 02-SSC-0397: SMA 7200/7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 3 YR
• 02-SSC-2895: SONICWALL SMA 7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 1YR
• 02-SSC-2896: SONICWALL SMA 7210 SECURE UPGRADE PLUS 24X7 SUPPORT 250 USER 3YR
• 02-SSC-2893: SONICWALL SMA 6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 1YR
• 02-SSC-2894: SONICWALL SMA 6210 SECURE UPGRADE PLUS 24X7 SUPPORT 100 USER 3YR
  
  NOTE: There is no separate secure upgrade SKU for CMS

Other SMA1000 Upgrade Considerations

• The old HA Pair (EX6000/7000/9000) model is no longer supported. The new HA model is Global HA with CMS.
• If end-users use the Connect Tunnel client, they should upgrade the client as well.
• If you are using EPC (Endpoint Control) you will need to transition from OPSWAT v3 to OPSWAT v4
• Capture ATP and FIPS ADD-ON (CMS and SMA) are NOT eligible for transfer during the Secure Upgrade process.
• Customers with EX9000 can upgrade to one or more units of SMA 7200/7210
• For license transfer through Customer Support, please provide the existing license count/support validity.
• In the event of mismatch between existing SMA license/support and new CMS license/support, the highest license count/support validity will be taken into consideration.
• For remote implementation support of NEW/SUP CMS/SMA deployment, please purchase the following SKU: 01-SSC-4357 SONICWALL REMOTE IMPLEMENTATION SMA 1000 SERIES.

SMA 100 Series Secure Upgrade Program Steps

Planning

• Decide on the new deployment model (e.g. hardware appliance or virtual appliance. See list of Upgrade Options below.
• Purchase the appropriate SMA 100 Secure Upgrade Program (SUP) package. See list of Secure Upgrade Plus SKUs below.
• The recommended firmware version for SMA100 series customers is v10.2+ latest patches.
• Setup a parallel SMA100 VPN setup consisting of the new appliance(s):
• Stand up a parallel SMA VPN with the new appliance(s) preferably with SMA100 series firmware version 10.2 + latest patch.
• Export your configuration settings from the old SMA VPN and Import the configuration into the new SMA environment.
• Contact SonicWall Customer Service (1.888.793.2830) to transfer user licenses and any remaining support to your new SMA environment.
• Validate everything works as expected in your new environment.
• Contact SonicWall Support if you have questions on setting up the new SMA
• Migrate users to the new SMA VPN infrastructure
• If your users are connecting with the NetExtender (NX) client, they should upgrade the client to the new version of NetExtender (NX)
• Contact SonicWall Support if you have questions on migrating users to the new SMA environment.
• Decommission your old SRA 1200/4200/1600/4600 appliance(s)
• Once you have the new SMA infrastructure operational and in Production, you should decommission the old SRA 1200/4200/1600/4600 appliance(s).
• The old hard drives should be destroyed or zeroed-out.

SMA100 Series Secure Upgrade Options

• Upgrade from an SMA Hardware Appliance to an SMA Virtual Appliance: RECOMMENDED
• The SMA 500v runs the same firmware and has the same set of features as SMA hardware appliances
• The Admin console and User experience for SMA500v is the same as hardware appliances
• SMA 500v may be running on VMWare ESXi or Microsoft Hyper-V or KVM or AWS or Azure
• By running virtual SMA appliances you can leverage existing virtual infrastructure and all the high availability options that come with a virtual infrastructure and thereby reduce costs
• Upgrade from a SMA Hardware Appliance to newer version SMA Hardware Appliance OR Virtual Appliance
• Standalone SRA 1200/4200/1600/4600 to standalone SMA (200/210) / SMA (400/410) / SMA 500v
• Upgrade SRA HA Pair hardware (4200/4600) to SMA Hardware (SMA 400/410) OR Virtual Appliance SMA 500v (on ESXi or Hyper-V or KVM)
• Leverage the virtual/cloud infrastructure's ability to quickly restore an appliance that fails (from backup or snapshot)

SMA100 Series Transfer of Licenses and Support

• As part of the Secure Upgrade Program existing user licenses and any remaining Support can be transferred to the new installation.
• Possible user license transfers are:
• User licenses on SRA 1200/4200/1600/4600 appliance(s) (Standalone OR HA pair) transfer to SMA 200/210/400/410/500v appliance(s)
• SMA user licenses transfer at 1:1 ratio. For example:
• 50 user licenses on SRA 1200/4200/1600/4600 standalone appliance(s) transfer as 50 user licenses on SMA 200/210/400/410/500v appliance(s)
• 50 user licenses on SRA 4200/4600 HA pair appliances transfer as 50 user licenses on SMA 400/410/500v HA pair appliances
• Remaining support transfer at 1:1 ratio. For example:
• 6 months of remaining Support on SRA 1200/4200/1600/4600 standalone appliance(s) transfer as 6 months of support on SMA 200/210/400/410/500v appliance(s)
• 6 months of remaining Support on SRA 4200/4600 HA pair appliances transfer as 6 months of support on SMA 400/410/500v HA pair appliances

SMA100 Series Secure Upgrade SKUs

• 02-SSC-2798       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 1YR
• 02-SSC-2799       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 3YR
• 02-SSC-2796       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 1YR
• 02-SSC-2797       SONICWALL SMA 410 SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 3YR
• 02-SSC-2794       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 25USER 1YR
• 02-SSC-2795       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 25USER 3YR
• 02-SSC-2792       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 26-50USER 1YR
• 02-SSC-2793       SONICWALL SMA 210 SECURE UPGRADE PLUS, 5 USER BUNDLE WITH 24X7 SUPPORT UP TO 26-50USER 3YR
• 02-SSC-2807       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 1YR
• 02-SSC-2808       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 100USER 3YR
• 02-SSC-2810       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 1YR
• 02-SSC-2809       SONICWALL SMA 500V SECURE UPGRADE PLUS, 25 USER BUNDLE WITH 24X7 SUPPORT UP TO 101-250USER 3YR
  
  NOTE: After completing the above steps please work with our Customer Service team (1-888-793-2830) to transfer license and support.
  
  

Other SMA100 Series Upgrade Considerations

• If end-users use the NetExtender (NX) client, they should upgrade the client as well.
• If you are using EPC (Endpoint Control) you will need to transition from OPSWAT v3 to OPSWAT v4
• For license transfer through Customer Support, please provide the existing license count/support validity.
• In the event of mismatch between existing SMA license/support and new CMS license/support, the highest license count/support validity will be taken into consideration.
• For remote implementation support of NEW/SUP CMS/SMA deployment, please purchase the following SKU: 01-SSC-8532 SONICWALL REMOTE IMPLEMENTATION SMA 100 SERIES