Find the Sophos Firewall serial number

The Serial number identifies one specific Sophos Firewall. The quickest place to find it is the SFOS Control center after signing in. If the firewall has already been claimed, there are two more reliable routes: Administration > Licensing on the firewall and Sophos Central.

If you are unsure which account holds the device, start with Sophos portals: SophosID, Central, Support, and firewall access. For a planned account change, follow Transfer a Sophos Firewall to another Sophos Central account rather than changing the assignment by trial and error.

Quick routes in SFOS 22

Control center

WebAdmin > Control center

The Control center appears immediately after sign-in. The appliance details at the top show Appliance model, Firmware version, Build, and Serial number. Record all four for a support case so that both the device and its software level are unambiguous.

Licensing

Administration > Licensing > Device registration details

Under Device registration details, SFOS shows the Appliance model, Serial number, and registration details. These details appear after the firewall has been claimed in Sophos Central. This area also shows the Company name, Contact person, and Registered email address from the associated Central account. Before sharing a screenshot, redact those contact details as well as the serial number.

This page is the better checkpoint for claiming, subscription status, or license synchronization. Synchronize refreshes the licenses; it does not change the serial number.

If the serial number is correct but the firewall is missing from management, Connect Sophos Firewall to Sophos Central covers registration and approval.

Find the serial number in Sophos Central

You must sign in to the correct Sophos Central tenant. An appropriate read-only or administrator role can view the information; claiming, transfers, and other changes require the relevant administrator permissions.

Firewall Management

My Products > Firewall Management > Firewalls

The firewall list shows Name, Version, IP Address, Model, and Serial Number for each managed device. Expand groups first. In a large estate, search for the serial number. This view is useful when local WebAdmin is unavailable, but the firewall must exist in that tenant.

Firewall licenses

Profile icon > Licensing > Firewall licenses

Here you can search existing firewalls by Name, Serial number, or Model. Expand the arrow next to the firewall name to see license details. For the Base license, the License ID is the same as the serial number. The License ID is not the License Key, or subscription key, from the license schedule.

This distinction prevents a common mistake: device searches and claiming use the serial number, while activation of a purchased subscription uses its key. See Activate a Sophos Firewall license key for that workflow.

Hardware, virtual, and cloud firewalls

• Hardware appliance: In addition to SFOS and Central, the serial number is printed on the appliance label. It may also appear in purchase, license, or renewal records, the CMDB, and previous support or RMA cases. Always reconcile these secondary sources with the appliance or SFOS; record the model, serial number, and site together.
• Virtual, software, and cloud appliance: There is no physical appliance label. Use Control center, Licensing, or Central, and map the serial number to the VM name, hypervisor or cloud instance ID, region, and licensing model.
• Base Firewall License: Sophos treats its lifetime differently. It does not expire for cloud, virtual, and software appliances; on hardware it expires when the device reaches end-of-life. This does not replace checking paid subscriptions or support entitlement. Understand the Sophos Firewall Base License explains the differences.

For a newly deployed virtual or cloud firewall, take the identifier from the instance that is actually running, not from a template or an earlier VM.

Document HA pairs unambiguously

An HA pair consists of two physical or virtual nodes. Read each node’s serial number in its own Control center or, for hardware, on that node’s appliance label. Record both serial numbers separately, along with Node1/Node2, node name, Initial primary, current role (Primary or Auxiliary), and site. In Sophos Central, the HA icon next to the firewall name opens the role and node details; this mapping does not replace checking both serial numbers.

For support or RMA, always state which node is affected. A single “cluster serial number” is not sufficient inventory information. Understand Sophos Firewall HA cluster variants explains the role model.

Share the serial number safely

A serial number is not a password or OTP. However, it is used in claiming, licensing, support, and RMA workflows, so it belongs in internal asset records. Therefore:

The serial number alone does not prove active support entitlement or the correct account assignment. Under Sophos’s current licensing model, personalized telephone, chat, or case support requires a bundle or Enhanced or Enhanced Plus Support.

• don’t publish it in public screenshots, forum posts, or open inventory lists;
• send it only to authorized recipients through an approved Sophos or partner support channel;
• also check Licensing screenshots for company name, contact person, and registered email address;
• use an obviously fictitious value such as SERIAL-REDACTED in examples;
• don’t store OTPs, passwords, license keys, backup keys, or support credentials with the serial number.

Template for support and inventory

A serial number alone does not describe a fault. This compact template helps avoid follow-up questions:

Serial number: SERIAL-REDACTED
Model:
Firmware version / build:
Location / function:
Central tenant:
License status:
HA cluster: yes/no
Affected node and current role:
Problem since:
Affected function / impact:
Latest backup available: yes/no

After a hardware replacement, keep the old and new serial numbers, RMA number, and replacement date together. Then update the Central assignment, license status, monitoring, backup system, CMDB, and renewal records. For the complete workflow, see Sophos hardware warranty, support, and RMA, Transfer a firewall license, and Create or restore a Sophos Firewall backup.

If details are missing or don’t match

1. In Control center, record the serial number and firmware level of the firewall you actually signed in to.
2. If Administration > Licensing has no registration details, check whether the firewall has been claimed in the expected Central account.
3. In Central, search for the same serial number under both Firewall Management > Firewalls and Licensing > Firewall licenses. Under Firewall licenses, also turn on Show hidden.
4. For HA, check both nodes and their current roles. Don’t merge the old and new serial numbers of a replacement device.
5. Don’t transfer a license or subscription on guesswork. Reconcile differences against the order, RMA records, and the responsible Sophos partner or Support.

If only local access is unavailable, see Device Access and Local Service ACL on Sophos Firewall and Restart the Sophos Firewall WebAdmin GUI. How to open a support case with Sophos covers the support workflow.

FAQ