EOL Tracking

Vendor EOL guides · SonicWall

SonicWall end-of-life: the five-stage firewall retirement clock

By Nico De Muynck · Updated July 19, 2026

Quick answer

SonicWall retires products through five named stages: Last Day Order → Active Retirement Mode (2 years) → Limited Retirement Mode (3 years) → End of Support → End of Life. The retirement window from ARM through LRM is five years, and because these are firewalls, the End-of-Life date, when security subscriptions stop, is a security deadline, not a paperwork one.

The five stages, in order

  • Last Day Order (LDO): advance notice that retirement is starting. The product still sells and support contracts are still available; informational only.
  • Active Retirement Mode (ARM): no longer manufactured or sold, but supported, with limited new features and bug fixes to the latest firmware. Duration: 2 years from the day after LDO.
  • Limited Retirement Mode (LRM): no new firmware or features; support limited to critical bugs and security vulnerabilities only. Duration: 3 years from the day after ARM.
  • End of Support (EOS): no more technical support, firmware updates or hardware replacement.
  • End of Life (EOL): the product is decommissioned and SonicWall discontinues security service subscriptions.

Why the EOL date is a security deadline

For most hardware, “end of life” means “no support if it breaks.” For a SonicWall it means something sharper: at EOL, security service subscriptions are discontinued, so the firewall stops receiving new threat signatures and security firmware. A perimeter device that can't update its defences is defending against last year's threats while facing this year's. The single worst class of device to run past end-of-life. The five-year LRM-onward runway feels comfortable, which is exactly why teams drift into the danger zone. (Why unsupported gear is a live risk: the five EOL risks.)

How to find your dates

1. The SonicWall lifecycle tables. SonicWall publishes product life cycle tables listing each model's stage dates (LDO, ARM, LRM, EOS, EOL).

2. Anchor on the LRM and EOL dates. LRM start tells you the platform has stopped advancing; EOL is your hard replacement deadline for security.

3. Record the EOL date per firewall and set the warning early. A lapsed-security firewall is not a “next quarter” problem.

Never run a firewall past its security cliff.

Record your SonicWall EOL dates in EOL Tracking and get warned months before security subscriptions stop.

Start free, up to 5 assets

No credit card · CSV import for whole fleets