SonicWall Gen 6 firewalls reached end of support in 2026: replace TZ 400/600, SOHO, NSa and Gen 6 NSv units

SonicWall ended support on April 16, 2026 for SOHO, SOHOW, TZ 300P, NSa 9250/9450/9650 and Gen 6 NSv virtual firewalls, and on August 1, 2026 for TZ 400, TZ 400W, TZ 600, TZ 600P, NSa 3600 and NSa 3650. End of support means no firmware updates, technical support or replacements.

Source facts

SonicWall’s lifecycle announcement for the TZ 400, TZ 600 and NSa 3600 family lists the last day to purchase 1-year support as July 31, 2025 and End of Support as August 1, 2026 for the TZ 400, TZ 400W, TZ 600, TZ 600P, NSa 3600 and NSa 3650. Suggested replacements include the TZ 470 for the TZ 400 and the TZ 670 for the TZ 600.

A separate notice put End of Support for the SOHO, SOHOW, TZ 300P, NSa 9250, NSa 9450 and NSa 9650 into effect on April 16, 2026, and the Gen 6 NSv notice did the same for the NSv 10 through NSv 1600 virtual firewalls on April 16, 2026.

SonicWall defines End of Support as no longer providing technical support, firmware updates or upgrades, or replacements. After it, SonicWall may continue to offer security service subscriptions but will not provide technical support for the product or any security service. The affected models are eligible for SonicWall’s Secure Upgrade Plus program to newer generations.

Applicability

Use this for any site with SonicWall firewalls. Check each unit’s model and serial number against SonicWall’s current product lifecycle tables, since other Gen 6 and 6.5 models follow their own schedules.

DSE recommendation

DSE recommends identifying every SonicWall Gen 6 appliance and scheduling its replacement now, treating any still in service as an unpatched edge device. Until it is replaced, restrict management and VPN access to known addresses, disable unused services, and monitor its logs closely. Plan the cutover with configuration export, VPN peer coordination and a tested rollback.

Verification

Export the firewall inventory with model, serial and firmware version, and reconcile it against SonicWall’s lifecycle tables quarterly. After each replacement, confirm the old unit is decommissioned and its configuration and credentials are removed or rotated.

Official references

SonicWall — Last Order Day of Support Announcement: TZ 400, TZ400W, TZ600, TZ 600P, NSA 3600, NSa 3650. SonicWall — End of Support Notification of SOHO, SOHOW, TZ 300P, NSa 9250, NSa 9450 and NSa 9650. SonicWall — End of Support Notification of Gen 6 NSv Series Virtual Firewalls. Reviewed October 18, 2026.