Licensing High Availability Features

Active/Active Clustering, Stateful High Availability, and Active/Active DPI licenses are included on registered firewalls. So, you do not need to purchase any additional licenses to use these High Availability features.

NOTE: Active/Active Clustering and Stateful High Availability licenses must be activated on each appliance, either by registering the unit on MySonicWALL from the SonicOS management interface, or by applying the license keyset to each unit if Internet access is not available.

You can view system licenses on the System > Licenses page of the management interface. This page also provides a way to log into MySonicWALL.

When the firewalls in the Active/Active cluster have Internet access, each appliance in the cluster must be individually registered from the SonicOS management interface while the administrator is logged into the individual management IP address of each appliance. This allows the Secondary units to synchronize with the SonicWALL licensing server and share licenses with the associated Primary appliances in each HA pair.

There is also a way to synchronize licenses for an HA pair whose appliances do not have Internet access. When live communication with SonicWALL's licensing server is not permitted due to network policy, you can use license keysets to manually apply security services licenses to your appliances. When you register a firewall on MySonicWALL, a license keyset is generated for the appliance. If you add a new security service license, the keyset is updated. However, until you apply the licenses to the appliance, it cannot perform the licensed services.

NOTE: In a High Availability deployment without Internet connectivity, you must apply the license keyset to both of the appliances in the HA pair.

Table 85 shows the HA licenses included with the purchase of the Dell SonicWALL network security appliance. Some platforms require additional licensing to use the Stateful Synchronization or Active/Active DPI features. SonicOS Expanded licenses or High Availability licenses can be purchased on MySonicWALL or from a Dell SonicWALL reseller.

 

Table 85. HA licenses available with SonicWALL network security appliances

Platform	Stateful HA	A/A DPI
TZ 300	N/A	N/A
TZ 400	N/A	N/A
TZ 500	• Expanded License • Stateful HA Upgrade License	N/A
TZ 600	• Expanded License • Stateful HA Upgrade License	N/A
NSA 2600	• Expanded license • HA license	N/A
NSA 3600	• Expanded license • HA license	N/A
NSA 4600	Included	N/A
NSA 5600	Included	Expanded A7014414
NSA 6600	Included	Expanded A7014415
SM 9200	Included	Included
SM 9400	Included	Included
SM 9600	Included	Included

You can use one of the following procedures to apply licenses to an appliance:

•	Activating Licenses from the SonicOS User Interface

•	Copying the License Keyset from MySonicWALL

Activating Licenses from the SonicOS User Interface

Follow the procedure in this section to activate licenses from within the SonicOS user interface. Perform the procedure for each of the appliances in a High Availability Pair while logged into its individual LAN management IP address.

See High Availability > Monitoring for information about configuring the individual IP addresses.

1	Log in to the SonicOS user interface using the individual LAN management IP address for the appliance.

2	On the System > Licenses page, under Manage Security Services Online, click the link for To Activate, Upgrade or Renew services, click here.

3	In the Licenses > License Management page, type your MySonicWALL user name and password into the text boxes.

4	Click Submit.

5	On the Systems > Licenses page under Manage Security Services Online, verify the services listed in the Security Services Summary table.

6	Repeat this procedure for the other appliance in the HA pair.

Copying the License Keyset from MySonicWALL

You can follow the procedure in this section to view the license keyset on MySonicWALL and copy it to the firewall. Perform the procedure for each of the appliances in a High Availability Pair while logged into its individual LAN management IP address.

See High Availability > Monitoring for information about configuring the individual IP addresses.

1	Login to your MySonicWALL account at https://www.mysonicwall.com.

2	In the left navigation pane, click My Products.

3	On the My Products page, under Registered Products, scroll down to find the appliance to which you want to copy the license keyset.

4	Click the product name or serial number.

5	On the Service Management page, click View License Keyset.

6	On the License Keyset page, use your mouse to highlight all the characters in the text box.

7	To copy the license keyset to the clipboard, press Ctrl+C.

8	Log in to the SonicOS user interface by using the individual LAN management IP address.

9	On the Systems > Licenses page under Manual Upgrade, press Ctrl+V to paste the license keyset into the Or enter keyset field.

10	Click Submit.

11	Repeat this procedure for the other appliance in the HA pair.