SonicWall firewall support, and what End of Support means for your model

What actually changes at End of Support

Nothing, on the day. That is the problem with it. The firewall carries on passing traffic exactly as it did the week before, so there is no outage to prompt anyone and no alert to action. The change is entirely in what happens next.

Three things stop. Firmware updates and upgrades end, so any vulnerability disclosed after that date stays open on that unit permanently. Technical support ends, so when something does go wrong there is no escalation path to the vendor. And hardware replacement ends, along with remaining inventory, so a failed unit cannot simply be swapped.

SonicWall may continue to offer security service subscriptions such as Content Filtering and Intrusion Prevention during the End of Support phase. That is worth knowing because it is the source of most of the confusion here: a business can be paying an active subscription on a firewall that will never receive another firmware fix, and reasonably assume the subscription means it is supported. It does not.

Why the date is per model, not per generation

You will see "Gen 6 End of Support: 16 April 2026" quoted in various places. It is not a single date and treating it as one will give you the wrong answer for most units.

16 April 2026 is the End of Support date for the SOHO, SOHOW and TZ300P specifically. The TZ400, TZ400W, TZ600 and TZ600P sat on 1 August 2026. The TZ350, TZ350W, TZ500, TZ500W and the SOHO 250 line run to 1 October 2026. The TZ300 and TZ300W went out in January 2025.

So the only reliable approach is to look up the exact model on the label, not the generation it belongs to. The table above is taken from SonicWall's own Product Life Cycle tables and carries the date it was last checked.

The compliance angle most people meet first

For a lot of businesses the practical trigger is not a security incident, it is a form. Cyber Essentials requires that software in scope is supported and receiving security updates, and a firewall past End of Support is neither.

The same question turns up in cyber insurance renewals and in customer security questionnaires, which increasingly ask directly whether any perimeter device is out of support. An unsupported firewall is the kind of answer that stalls a tender.

If you are working toward certification, this is worth checking before the assessment rather than during it. We have written up what the certification actually verifies in our guide to Cyber Essentials and Cyber Essentials Plus.

The routes forward, honestly compared

There are three, and the right one depends on what the firewall is doing rather than on what it is.

Replace like for like with a current SonicWall. The least disruptive option if the estate is otherwise settled and the configuration is well understood. Settings can usually be migrated rather than rebuilt, which keeps the change window short.

Take the opportunity to reconsider the platform. A firewall refresh is one of the few natural moments to ask whether a different vendor or a managed service fits better, particularly if the current unit was chosen years ago for reasons that no longer hold. We support WatchGuard alongside SonicWall and have no reason to push you either way.

Move the function rather than the box. For a business that has largely moved to cloud, some of what the firewall does may now be better handled by identity controls, Conditional Access and endpoint policy. That is not true for everyone, and it is emphatically not true for sites with on-premises servers or operational technology, but it is worth asking before buying the same shape of appliance again.