SonicWall Endpoint Security (SES) seed deployment assistance guide

The SES Seed program provides SonicWall Endpoint Security (SES) Advanced licenses to customers who purchase eligible Gen 8 firewalls. This guide is for the customers and Partners to activate the SES Seed license and make use of its benefits. It explains how to activate the seed license, configure the tenant, and deploy the agent.

Eligibility and Entitlement

• Eligible firewalls: All new 3Y Secure Upgrade SKUs.
• Notification: Eligible firewalls automatically receive a notification in the “To-do list” on the MySonicWall Product page. The seed license is activated from this notification.
• Validity: Seed provides SES Advanced licenses with 9 months of validity.
• Program period: The benefit is planned to be available until April 30, 2027.
• Quantities: The SES license quantity varies for different models. When a customer has multiple eligible firewalls, the quantities are cumulative, and the total is displayed during activation.

Before You Begin

• Confirm that the seed notification appears in the “To-do list” for the eligible firewall.
• Obtain the customer’s preferred tenant name and Data Center.

Important: SES Seed licenses cannot be activated in a MySonicWall (MSW) tenant where an SES product is already present.

Product Activation

1. Navigate to MySonicWall and open the Product page. Under the “To-do list,” locate the eligible firewall and activate the attached seed license.
   
2. Click Activate. The total number of SES Advanced licenses available for use is displayed.
   
   
   
3. Provide a friendly Tenant name, choose the Data Center based on the customer preference, and click Proceed. The seed license is activated in the background.
   
   
   
4. Confirm that the successful activation message is displayed.
   
5. Confirm that the license details are displayed.
   
6. Navigate to the Cloud Security Center, choose the desired tenant, and click the Endpoint Security tile. This opens the SES management console.

Product Configuration

1. In the SES management console, open the Policy page and choose the newly created tenant.
2. By default, policies are configured in Block mode. If the customer requests Detect mode, select Detect only mode and save the policy. Detect only mode reports threats without blocking them.
   
3. Open the Installer page and select the installer highlighted at the top of the list.
4. Click Download and copy the installer token (shown in orange). Treat the token as confidential and share it only with the customer’s authorized administrators.
   
5. After the token is copied, the following message is displayed.
   

Agent Deployment

Deploy the agent in one of two ways:

• With RMM: If the customer uses an RMM tool, provide the installer file and the installation token. The customer then pushes the installer to the desired endpoints.
• Without RMM: Coordinate with the customer to deploy the installer file manually, using the installation token copied from the console.

After installation, confirm that the endpoints appear in the SES management console.

After the Seed Period

Reach out to your SonicWall Sales representative or Support team to start a conversion to a paid license before the 9-month seed license expires.

References

• Admin Guide
• Threat Hunting Cheat Sheet
• API Documentation
• Release Notes
• SonicWall Endpoint Security datasheet
• Self-guided demo
• Associate and Professional accreditation paths  (Available on SonicWall University)