Overview
SonicWall’s 3 & Free Program enables secure, seamless access to any resource from any device. Trade in any legacy SonicWall or competitive firewall with the purchase of a 3-year Advanced Protection Security Suite (APSS) and get a free Gen 8 next-generation firewall—no extra costs, just total protection. 3 & Free also includes 1 year of our cloud-based zero-trust secure access from anywhere solution, Cloud Secure Edge.
In today’s cloud-first, mobile-dependent world, legacy security models fall short. CSE combines VPNs, web proxies, and firewalls into a single, scalable, multi-tenant cloud solution—no extra hardware required. This promotion provides best-in-class security and simplified access, equipping you to meet modern security demands while unlocking new growth opportunities.

Interested in Gen 7 instead? Check out our 3 & Free Program for Gen 7 Firewalls
Secure More, Pay Less: Get a Free Gen 7 Firewall with SonicWall's 3 & Free Promotion!
Click to learn more and view all eligible SKUs and the full promotion matrix.
Price:
Add to Cart for Pricing
Only for upgrades: TZ280 hardware with Advanced Protection Security Suite includes 1 year CSE - Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr SIA - basic (10 user) an
Price:
Add to Cart for Pricing
Only for upgrades: TZ380 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Only for upgrades: TZ380w hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr si
Price:
Add to Cart for Pricing
Only for upgrades: TZ480 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Only for upgrades: TZ580 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Only for upgrades: TZ680 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Advanced Protection: Advanced Protection Security Suite (Apss) Includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Dns Filtering,Cloud Management & 7-Day Alerting , 7-Day Advanced Reporting & Analytics, 24X7 Support With Firmware Updates, Cloud Secure Edge For 1 Yr Sia - Basic (25 User) And 1 Yr Spa - Advanced (8 User)
Price:
Add to Cart for Pricing
Advanced Protection: Advanced Protection Security Suite (Apss) Includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Dns Filtering,Cloud Management & 7-Day Alerting , 7-Day Advanced Reporting & Analytics, 24X7 Support With Firmware Updates, Cloud Secure Edge For 1 Yr Sia - Basic (25 User) And 1 Yr Spa - Advanced (8 User)
Price:
Add to Cart for Pricing
Only for upgrades: NSA 4800 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr
Only for upgrades: NSA 5800 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr
Only For Upgrades: NSa 6800 Hardware With Advanced Protection Security Suite Includes 1 Year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) Includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, DNS Filtering,Cloud Management & 7-Day Alerting , 7-Day Advanced Reporting & Analytics, 24X7 Support With Firmware Updates, Cloud Secure Edge For 1 Yr
What's Included?
![]()
Free Next-Gen Firewalls
Buy 3 years of Advanced Protection Security Suite (APSS) or Essential Protection Service Suite (EPSS) and trade in eligible legacy SonicWall or competitor solutions to get the hardware FREE!
![]()
1-Year Cloud Secure Edge (CSE) Licenses
Get a discounted 1-year license to CSE Secure Internet Access and Secure Private Access. CSE comes with a certain number of licenses per firewall.
![]()
Upgrade Opportunity
Replace outdated competitor solutions or upgrade qualifying SonicWall legacy models. Remaining services transfer from eligible legacy models.
![]()
Embedded Cyber Warranty
Gain peace of mind with advanced security solutions backed by SonicWall’s pioneering cyber warranty, offering an added layer of protection.
What is Cloud Secure Edge (CSE)?
CSE is your all-in-one, cloud-based solution for secure and seamless remote access to resources from any device, anywhere. Key features include:
![]()
Zero Trust Network Access (ZTNA)
Ensures continuous policy enforcement.
![]()
Content & Threat Filtering
Protects users from malicious or inappropriate content.
![]()
Device Posture Assessment
Only compliant, secure devices can connect.
![]()
Streamlined Management
Replaces traditional appliances (like VPNs) with a simple, cloud-first platform
Eligible Product Matrix
You can trade in a legacy SonicWall or competitor firewall to get your free, eligible firewall upgrade.
| ELIGIBLE UPGRADES | ELIGIBLE REPLACEMENTS |
|---|---|
| TZ 100 Series, TZ 105 Series, TZ 200 Series, TZ 205 Series, TZ 210 Series, TZ 215 Series, TZ 300, TZ 150, TZ 150W, TZ 170, TZ 170W, TZ 170 SP, TZ 170 SPW, TZ 180, TZ 180W, TZ190, TZ 190W, PRO 100, SOHO2, SOHO3, SOHO TZW, SOHO Telecommuter, SonicWall DMZ, XPRS, XPRS2, SonicWall Plus, TELE, TELE2, TELE3, TELE3 SP, SOHO, SOHOW, SOHO 250, SOHO 250W | TZ 80 |
| TZ 150, TZ 100, TZ 105, SOHO, SOHO 250, TZ 170, TZ 200, TZ 205, TZ 270, TZ 300, TZ 350, TZ 370, TZ 180, TZ 210, TZ 215, TZ 400, TZ 470, TZ 190, NSa 220, NSa 240, NSa 250, TZ 500, TZ 570, TZ 600, TZ 670, PRO 100 Series, SOHO Series, Telecommuter, DMZ, XPRS Series, Plus, TELE Series | TZ 270, TZ 280 Series, TZ 370, TZ 380 Series, TZ 470, TZ 480 Series, TZ 570, TZ 580 Series, TZ 678, TZ 680 Series |
| TZ 190, NSa 220, NSa 240, NSa 250, TZ 400, TZ 470,TZ 500, TZ 570, TZ 600, TZ 670 | TZ 570, TZ 580 Series, TZ 670, TZ 680 Series, NSa 2700, NSa 2800 |
| NSa 2400, NSa 2600, NSa 2650, NSa 2700, PRO 200, PRO 230, PRO 1260, PRO 2040 | TZ 570, TZ 580 Series, TZ 670, TZ 680 Series, NSa 2700, NSa 2800, NSa 3700, NSa 3800 |
| NSa 3500, NSa 3600, NSa 3650, NSa 3700, PRO 3060,PRO 4000, PRO 4100,PRO 4060, PRO-VX, PRO 300, PRO 330 GX250 | NSa 2700, NSa 2800, NSa 3700, NSa 3800, NSa 4700, NSa 4800 |
| NSa 4500, NSa 4600, NSa 4650, NSa 4700 | NSa 3700, NSa 3800, NSa 4700, NSa 4800, NSa 5700, NSa 5800 |
| NSa 5000, NSa E5500, NSa 5600, NSa 5650, NSa 5700, PRO 5060c, PRO 5060f, GX650 | NSa 4700, NSa 4800, NSa 5700, NSa 5800, NSa 6700 |
| NSa E6500, NSa 6600, NSa 6650, NSa E7500, NSa E7510, NSa E8500, NSa E8510 | NSa 5700, NSa 5800, NSa 6700, NSsp 10700, SM 9400, NSsp 11700 |
| SM 9200, NSa 9250, SM 9400, NSa 9450 | NSa 6700, NSsp 10700, NSsp 11700 |
| SM 9600, NSa 9650, SM 9800, SM E10200, SM E10400, SM E10800, NSsp 12400 | NSsp 11700, NSsp 13700, NSsp 15700 |
| COMPETITOR PRODUCT TRADE-IN | TZ 80, TZ 270, TZ 280 Series, TZ 370, TZ 380 Series, TZ 470, TZ 480 Series, TZ 570, TZ 580 Series, TZ 670, TZ 680 Series, NSa 2700, NSa 2800, NSa 3700, NSa 3800, NSa 4700, NSa 4800, NSa 5700, NSa 5800, NSa 6700, NSsp 10700, NSsp 11700, NSsp 13700, NSsp 15700 |
Frequently Asked Questions
The SonicWall 3 & Free with CSE promotion offers a free Gen 8 next-generation firewall and Cloud Secure Edge (CSE) licenses when you purchase a 3-Year Advanced Protection Security Suite (APSS). This promotion provides enhanced security and simplified access for modern, cloud-centric environments.
This promotion is open to new and existing customers who purchase a 3-Year APSS plan and are upgrading from a legacy SonicWall or eligible competitor firewall.
CSE consolidates the functions of traditional network appliances (VPNs, web proxies, and firewalls) into a unified, multi-tenant cloud solution. It provides secure, seamless access from any device, simplifies deployment and management, and enhances scalability.
Eligible models include Gen 8 SonicWall firewalls, and certain trade-ins are accepted for legacy SonicWall and competitor firewalls. For specific models, please refer to the Eligible Product Matrix.
The Advanced Protection Security Suite (APSS) offers more comprehensive protection, including advanced threat detection and response capabilities. This plan is eligible for the 3 & Free with CSE promotion.
To qualify, you must purchase a 3-Year APSS and trade in an eligible SonicWall or competitor firewall. Proof of ownership and proper disposal of the old device within 60 days of registering the replacement firewall may be required.
Yes, CSE is designed to support multi-tenant environments, allowing you to offer secure private access to multiple customers or divisions from a single, unified solution.
Please contact us for current promotion end date, as this offer is available for a limited time.
No additional hardware is necessary. The CSE solution integrates seamlessly with your existing SonicWall Gen 8 firewalls to provide secure access without additional hardware investments.
For more details, please contact us.
Terms and Conditions
To qualify for SonicWall’s 3 & Free with CSE promotion, customers need to have owned an eligible competitive product for at least six months before registering. Once registered, customers must dispose of their old product within 60 days. If proof of ownership isn’t provided within 15 days after request, or if the old product isn’t disposed of within the 60-day window, SonicWall may cancel the replacement product’s services.
To register, customers must complete the Competitive Replacement Form, providing accurate contact information (contact name, email, phone number, organization, and address) and confirming that all responses are correct. Participation in either the Secure Upgrade Plus or Competitive Trade-in offers is required for the 3 & Free promotion.
Important: Before purchasing, please review the Eligible Product Matrix to ensure eligibility, as SonicWall reserves the right to adjust or deny entitlements for misrepresented qualifications. SonicWall may also make changes to this Customer Loyalty Program at any time.
Secure More, Pay Less: Get a Free Gen 7 Firewall with SonicWall's 3 & Free Promotion!
Click to learn more and view all eligible SKUs and the full promotion matrix.
Price:
Add to Cart for Pricing
Only for upgrades: TZ280 hardware with Advanced Protection Security Suite includes 1 year CSE - Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr SIA - basic (10 user) an
Price:
Add to Cart for Pricing
Only for upgrades: TZ380 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Only for upgrades: TZ380w hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr si
Price:
Add to Cart for Pricing
Only for upgrades: TZ480 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Only for upgrades: TZ580 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Only for upgrades: TZ680 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr sia
Price:
Add to Cart for Pricing
Advanced Protection: Advanced Protection Security Suite (Apss) Includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Dns Filtering,Cloud Management & 7-Day Alerting , 7-Day Advanced Reporting & Analytics, 24X7 Support With Firmware Updates, Cloud Secure Edge For 1 Yr Sia - Basic (25 User) And 1 Yr Spa - Advanced (8 User)
Price:
Add to Cart for Pricing
Advanced Protection: Advanced Protection Security Suite (Apss) Includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, Dns Filtering,Cloud Management & 7-Day Alerting , 7-Day Advanced Reporting & Analytics, 24X7 Support With Firmware Updates, Cloud Secure Edge For 1 Yr Sia - Basic (25 User) And 1 Yr Spa - Advanced (8 User)
Price:
Add to Cart for Pricing
Only for upgrades: NSA 4800 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr
Only for upgrades: NSA 5800 hardware with advanced protection security suite includes 1 year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) includes - capture advanced threat protection, gateway anti-virus, anti-spyware, intrusion prevention, application firewall service, content filtering services, comprehensive anti-spam, DNS filtering,cloud management & 7-day alerting , 7-day advanced reporting & analytics, 24x7 support with firmware updates, cloud secure edge for 1 yr
Only For Upgrades: NSa 6800 Hardware With Advanced Protection Security Suite Includes 1 Year CSE - Advanced Protection: Advanced Protection Security Suite (APSS) Includes - Capture Advanced Threat Protection, Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Firewall Service, Content Filtering Services, Comprehensive Anti-Spam, DNS Filtering,Cloud Management & 7-Day Alerting , 7-Day Advanced Reporting & Analytics, 24X7 Support With Firmware Updates, Cloud Secure Edge For 1 Yr

