SonicWall's license manager discontinues support of TLS 1.0 and TLS 1.1 on Oct 31, 2023

Community Manager

As part of SonicWall's ongoing commitment to security, we are discontinuing support for the TLS 1.0 and TLS 1.1 encryption protocols for our license manager service. After Oct 31, 2023, GEN 5 and GEN 6 firewalls running older firmware will no longer be able to communicate with SonicWall's license manager.

Examples of services that will no longer function properly include:

• Capture Advanced Threat Protection
• Gateway Anti-Malware
• Intrusion Prevention
• Application Control

To learn more and also how to upgrade your firewall's firmware please visit:

https://www.sonicwall.com/support/product-notification/license-manager-discontinues-support-of-tls-1-0-and-tls-1-1-encryption-protocols/230907124013593/

Arkwright

What does "function properly" mean?

For example:

• GAV signatures will stop updating but otherwise GAV will carry on working?
• GAV will decide it's unlicensed and cease completely?
• Cloud backups will stop happening?
• SSLVPN user licenses will disappear?

That page recommends upgrading to "the latest version", but that's good practise anyway. That page does not explicitly say that <6.5.4.12 will break, though. So is that the case?

MustafaA

Hi @Arkwright

When the firewall uses TLS 1.0 or 1.1 to connect to the License server, it will be rejected and hence the license information will not be fetched. Any service that depends on license will be affected. Technically speaking if the firewall is updated with the License Keyset it should continue to operate until the next sync attempt, but certainly that is not a desired path.

Arkwright

What firmware version was support for TLS 1.3 license manager connections added?