SonicWall Firewalls (TZ / NSa / NSsp hardware) End of Life (EOL) Dates & Support Timeline

SonicWall Firewalls (TZ / NSa / NSsp hardware) lifecycle status — the real story

SonicWall firewall appliances are the hardware (and NSv virtual appliances) under SonicOS: the TZ desktop series, the NSA / NSa mid-range, the NSsp and SuperMassive chassis. Cycles on this page are appliance models, so it is the hardware companion to the SonicOS software page: the exploited CVEs that put SonicOS and the SMA products in CISA's KEV catalog are software CVEs and are tracked there, but they run on these boxes, and a box past end of support receives no firmware at all. Every date is taken from SonicWall's own Product Life Cycle Tables page (public, no login), which embeds the full dataset, and is re-checked at every build. SonicWall's phases, in its words: Last Order Day is the last day to order the product; Active Retirement Mode means it is no longer manufactured or sold; Limited Retirement Mode means SonicWall will no longer develop or release firmware updates or new features; End of Support means no technical support, firmware updates or hardware replacement. Field mapping: support is the Limited Retirement Mode start (the firmware cut-off); eol is End of Support; the Last Order Day, Active Retirement Mode start and 1-Year Support Last Order Day are carried as extra fields.

The Gen 6 cliff is happening now. TZ400, TZ400W, TZ600, TZ600P, NSa 3650 and NSA 3600 reached End of Support on August 1, 2026. TZ350, TZ350W, TZ500, TZ500W, SOHO 250 and SOHO 250W, NSa 4650, NSa 5650, NSa 6650, NSA 4600, NSA 5600 and NSA 6600 reach it on October 1, 2026. Earlier in the year, NSa 9250, NSa 9450 and NSa 9650, the original SOHO and SOHOW, the TZ300P and the Gen 6.5 NSv virtual appliances (NSv 10 through NSv 1600) ended on April 16, 2026, and the SuperMassive 9200 to 9800 and NSsp 12400 and 12800 chassis ended on February 20, 2026. NSa 2650 ended on May 1, 2026 and NSA 2600 on March 8, 2024. Firmware for the whole generation stopped earlier: Limited Retirement Mode began April 16, 2024 for the models that left sale on April 15, 2022.

Gen 7 has begun its own run-down. SonicWall lists a Last Order Day of October 31, 2025 for the NSa 2700 and NSa 3700 and of June 30, 2026 for the TZ270 and TZ470, with no further milestone dates published yet, and October 30, 2026 for the NSv 270, 470 and 870 virtual appliances. Those rows are carried here with the Last Order Day and no end-of-support date, which the EOS Edge Device feed reports as no date announced. SonicWall names the Gen 7 platform on the same page as the TZ270, TZ370, TZ470, TZ570 and TZ670 series, NSa 2700 to NSa 6700 and NSsp 10700 to NSsp 15700; it publishes no per-model recommended replacement on the lifecycle page, so none is claimed here.

Gen 5 models (TZ 100 to TZ 215, NSA 220 to NSA 250M, NSA 240 to NSA 5000 and the E-Class E8500) are included for completeness; all reached End of Support between 2017 and 2021. Under CISA BOD 26-02 every one of these, and every Gen 6 model from October 1, 2026, is an end-of-support device regardless of the SonicOS build it runs.

SonicWall Firewalls (TZ / NSa / NSsp hardware) release and support pattern

Of the 79 release lines tracked, 72 are past end of life and 7 are still within support. No end-of-life date is currently published for the 7 supported lines.

Computed from the tracked release data at every build — the figures above are the dates in the table, restated, not an editorial estimate.

What does SonicWall Firewalls (TZ / NSa / NSsp hardware) end of life mean for your organization?

When a version of SonicWall Firewalls (TZ / NSa / NSsp hardware) reaches end of life, the maintainers stop issuing security patches. Vulnerabilities discovered after this date are publicly disclosed on the National Vulnerability Database, exploit code appears on GitHub, and your systems remain permanently exposed.

The CVE blind spot: A CVE-based scan does not show the accumulation of unpatched vulnerabilities in EOL software. Some scanners flag unsupported versions of common products, but coverage varies, and none of them give you the date in advance. With a zero-day, nobody knows about the vulnerability. With EOL software, the vulnerability is public — listed, rated, and often weaponized — but no vendor patch is coming. This is one of the most dangerous gaps in enterprise security posture.

Organizations running EOL SonicWall Firewalls (TZ / NSa / NSsp hardware) should treat it as a vulnerability class in their risk register, apply compensating controls (network segmentation, enhanced monitoring, access restriction), and prioritize migration to a supported version.

Your options when SonicWall Firewalls (TZ / NSa / NSsp hardware) reaches end of life

There are four realistic paths. Which one is right depends far more on how long the system needs to keep running than on the version you are on today.

How to choose, in one question: how many more years does this system need to run? Under a year, extended support (where it exists) is usually cheaper than an emergency migration. One to three years, migrate — support purchased repeatedly costs more than doing the project once, and the project only gets harder as the version ages. Indefinitely, migrate now and plan the next migration before it surprises you.

Worth saying plainly, because vendors selling extended support rarely will: extended support is often the more expensive choice over a multi-year horizon. It is the right answer when a deadline is genuinely unreachable, not as a default. Compare the annual fee against the one-time cost of migrating before committing to either.

Formalizing decisions like this across your estate? Our free EOL policy template is a ready-to-adopt policy with risk tiers, remediation SLAs, and audit mapping — no signup, free to use and share.

Extended Support Options

If you cannot migrate immediately, extended support vendors provide continued security patches for EOL SonicWall Firewalls (TZ / NSa / NSsp hardware) versions. This is a bridge, not a permanent solution — plan your migration in parallel.

Related Products