Free 1-Year ZTNA Subscription for SonicWall Firewall Customers

We’re excited to offer a free 1-year subscription to our Cloud Secure Edge (CSE-SPA Advanced) license with 24x7 Support. By activating your CSE licenses, you’ll gain ZTNA enforcement seamlessly integrated with your SonicWall Gen 7 firewalls, enabling more granular access control in just a few simple steps. We can’t wait for you to try it!

How Can You Get Free Licenses?

After registering a new SonicWall Gen 7 TotalSecure or Secure Upgrade Firewall for the first time, you’ll receive an email with activation keys and instructions to install the CSE connector on your firewall. The number of free licenses will vary based on the firewall model. This offer is available to both our customers and MSP partners.

If you have any questions or feedback, please contact your account manager or reach out to us at sales@sonicwall.com

Why Add CSE to Your SonicWall Gen 7 Firewalls?

Cloud Secure Edge (CSE) offers fast, simple, and secure zero-trust access to any application from any device, anywhere—protecting both users and businesses. When integrated with your firewall, CSE helps you address key use cases:

Secure Remote Access with ZTNA

Unlike broad-access VPN solutions, CSE-ZTNA authenticates users, evaluates devices, continuously verifies both, and grants access to specific company resources based on least-privileged access policies. You can deploy CSE incrementally alongside existing infrastructure without disruption.

Protection Against Credential Compromise  

Relying solely on user credentials means that anyone, legitimate or not, in possession of them has unfettered access to business infrastructure. CSE’s granular policies enforce user and device identity, device posture, and resource sensitivity, reducing risks like credential theft and further providing security teams much-needed visibility into what the user and device are doing. It's very different from legacy VPN, where cyber-attackers with user credentials or device can easily move laterally and likely venture undetected, resulting in a breach.  

Support for Third-Party Access, BYOD, and M&A

Provide users with secure access to only the resources they need, optionally incorporating device trust. CSE enables BYOD without requiring Mobile Device Management (MDM) or Unified Endpoint Management (UEM). Corporate assets remain protected, while users enjoy a seamless experience without sacrificing their device preferences.

Additionally, CSE scales securely and quickly on WireGuard, ensuring that only authorized users access critical resources—including corporate applications, SSH/RDP servers, Kubernetes, and databases—strictly on a need-to-access basis.

Easy Integration

Connecting CSE to your existing firewall is simple. Check out this short demo of the CSE Connector.

The CSE Connector is a dial-out component that establishes a secure tunnel with the SonicWall Global Edge Network, a key part of the CSE solution. It can be deployed in any location with connectivity to your internal applications and only requires outbound connections—no inbound open ports needed.

Additional Resources

• CSE-Firewall Connector Feature Guide
• CSE Getting Started Guide
• CSE Datasheet
• CSE Technical Documentation
• Blog: Give a ZTNA Boost to Your SonicWall Firewall