In short: If you have a Gen 6 firewall (TZ300 to TZ600), replace it, because many of these models are now past end of support. If you have Gen 7 (TZ270 to TZ670), compare renewing with SonicWall's Secure Upgrade Plus bundle, which often gets you new Gen 8 hardware for little more than the renewal. If you're buying new, buy Gen 8.
First, find out which generation you have
The model number is on the front or underside of the firewall and in its management console. SonicWall's TZ range falls into three generations:
| Generation | TZ models | Status (October 2026) | What to do |
|---|---|---|---|
| Gen 6 / 6.5 | TZ300, TZ350, TZ400, TZ500, TZ600, SOHO | TZ400, TZ400W, TZ600 and TZ600P reached end of support on 1 August 2026 | Replace |
| Gen 7 | TZ270, TZ370, TZ470, TZ570, TZ670 | Supported. TZ270 and TZ470 stopped being sold on 30 June 2026 | Renew, and plan the upgrade |
| Gen 8 | TZ80, TZ280, TZ380, TZ480, TZ580, TZ680 | Current range (TZ280 and TZ480 launched August 2025) | Renew |
Why Gen 6 needs replacing
End of support means SonicWall no longer provides firmware updates, technical support or hardware replacement for the appliance. SonicWall may still sell some security subscriptions for these models, but without firmware fixes the firewall itself becomes the weak point. A firewall is the front door to your network, so it's the last device you want running unpatched.
SonicWall's recommended Gen 8 replacements are the TZ380 or TZ480 for a TZ400, the TZ380W for a TZ400W, and the TZ680 for a TZ600.
Gen 7: renew or upgrade?
Gen 7 firewalls are still supported and their security renewals are still sold. Being taken off sale (as the TZ270 and TZ470 were on 30 June 2026) is the first step in SonicWall's end-of-life process, not the end of support. So renewing a Gen 7 firewall this year is reasonable, but we'd suggest:
- If you renew a TZ270 or TZ470, renew for one year rather than three, so you're not paying ahead on hardware that's on its way out. Better still, compare a Secure Upgrade Plus quote first (below).
- Upgrade now instead if your internet line has outgrown the firewall, you need more VPN users, or you're adding a site.
Upgrade for little more than a renewal: SonicWall Secure Upgrade Plus
SonicWall's Secure Upgrade Plus programme lets you trade in your existing SonicWall (or a competitor's firewall) and buy a new Gen 8 firewall bundled with 2 or 3 years of the Advanced Protection Security Suite, at a discount. The 3-year bundles also include 1 year of SonicWall Cloud Secure Edge for secure remote access.
Here's a guide to what three years of protection costs for the most common Gen 7 models (indicative prices, excluding VAT):
| Your firewall | Renew it for 3 years | Buy the Gen 8 model normally (3 years) | Secure Upgrade Plus (3 years) |
|---|---|---|---|
| TZ270 → TZ280 | R27,099 | R43,312 | R32,450 |
| TZ370 → TZ380 | R41,029 | R58,403 | R40,613 |
| TZ470 → TZ480 | R63,920 | R92,204 | R69,022 |
In other words, for about R5,000 more than renewing your TZ270 or TZ470, you get brand-new Gen 8 hardware with three years of security, and on a TZ370 the upgrade actually costs less than renewing. Compared with buying the new firewall the normal way, Secure Upgrade Plus saves 25 to 30%.
A 2-year bundle is also available if you'd rather commit for less time. It saves 22 to 25% compared with buying normally.
Secure Upgrade Plus is quote-only, because we need to confirm your existing firewall is eligible. "Buy normally" means the new firewall with 1-year TotalSecure Advanced Edition plus a 2-year Advanced Protection Security Suite renewal. Prices are a guide only. SonicWall pricing changes regularly and follows the rand/dollar exchange rate, so ask us for a current quote.
What happens if you don't renew at all?
The firewall keeps passing traffic, but its security services stop updating. Intrusion prevention, gateway anti-malware and content filtering fall behind new threats, and you lose access to firmware updates and SonicWall support. In practice the firewall becomes a basic router with a false sense of security.
Our recommendation
- Send us your SonicWall's serial number. We'll look up your model, active licenses and their expiry dates, so you know exactly what's due and when.
- Gen 6: plan a replacement now.
- Gen 7: before you renew, ask us for a Secure Upgrade Plus quote. For a few thousand rand more (or less, on a TZ370) you can move to Gen 8 with three years of security included.
- Gen 8: renew as normal.
Request an upgrade quote Gen 7 renewals · Gen 8 renewals · SonicWall firewalls
Sources: SonicWall: Last Time Buy announcement for TZ270 and TZ470 · SonicWall: End of Support notification for TZ400, TZ600 and NSa 3650 · SonicWall product life cycle tables. SonicWall Customer Loyalty Program (Secure Upgrade Plus). Prices are indicative only, exclude VAT, and change with SonicWall pricing and exchange rates.