Firewall renewals and end-of-life: plan before support lapses.

A firewall without current subscriptions and firmware is a box that looks protective.

What expires

• Security subscriptions: threat prevention, web filtering and updates.
• Hardware support: replacement under warranty.
• Software support: firmware and security patches for the model.

Know the dates

Record each firewall’s subscription end, warranty end and the manufacturer’s end-of-sale and end-of-support dates in the asset register.

Plan early

Start renewal or replacement discussions three to six months ahead. Lead times and budgets need that time.

Renew or replace

Consider throughput needs, encrypted-traffic inspection load, number of VPN users, cloud use and features. Newer models often cost the same as a long renewal of an old one.

Migration

Export configurations, plan the rules clean-up, schedule a maintenance window and keep the old unit available for rollback.

High availability

Critical sites benefit from a pair of firewalls so one can fail.

Review the policy

Replacement is a chance to remove unused rules, tighten access and update documentation.