Update Your Firebox — Fireware 2026.4, 12.12.4 and 12.5.22

FireCloud Network Access is now generally available. You can add an entire internal network or subnet to FireCloud as a single network resource. Users can then reach the hosts in it without a separate private resource for each one.

Why network resources

Moving from a traditional SSL VPN model to a full zero-trust architecture is not a simple switch. Many customers still rely on legacy applications, foundational network access patterns, and operational processes that are not yet ready for app-by-app zero-trust enforcement.

With FireCloud Network Access, you can reduce reliance on broad VPN access today while creating a practical migration path toward a broader zero-trust architecture over time. Your network resources can now be assigned to access rules for specific user groups.

If you already use FireCloud private resources

Network resources work alongside your private resources with the same gateways and access rules. Users connect with the same FireCloud Connection Manager they have today. Their traffic passes through a FireCloud point of presence (PoP), where TLS inspection and security services can be applied.

How it works

1. Make sure the gateway is up to date: the latest Virtual Gateway or the latest Fireware on a Firebox Gateway.
2. In WatchGuard Cloud, go to Configure > FireCloud > Resources and click Add Resource. Select the gateway and enter the address range, for example 10.10.10.0/24. If users reach hosts by name, add the internal DNS server.
3. Add the network resource to an access rule for the user groups that need it.

What you need to know

• Gateways: Network resources run on a Virtual Gateway or a Firebox Gateway, not on the Server Gateway.
• Ranges and rules: Network resources support private ranges (RFC 1918), and each access rule can include one network resource.
• Private resources: A network resource covers the subnet. To control access by port or protocol, or when a customer has overlapping internal networks, your access can be configured by adding individual private resources.

Have Questions?

Refer to the FireCloud release notes and the Add Resources in FireCloud page in the Help Center for configuration details. For questions, contact your WatchGuard Account Manager or use standard support channels.

As previously announced in March 2022, WatchGuard initiated the End-of-Sale (EOS) and End-of-Life (EOL) process for the Firebox T15 and T15-W appliances. The original announcement outlined the product retirement timeline and migration recommendations.

With the March 2027 End-of-Life date now seven months away, partners and customers should begin planning migrations for any remaining Firebox T15 and T15-W deployments to avoid service disruptions and ensure continued access to the latest security, performance, and support benefits.

Key Dates

Recommended Migration Path

Customers currently using Firebox T15 and T15-W appliances should migrate to the Firebox T115-W, which provides modern hardware, improved performance, continued support, and access to the latest Fireware releases and security services.

Why Upgrade Now?

• Avoid last-minute hardware refresh projects before the EOL deadline.
• Maintain access to software updates and technical support.
• Benefit from improved performance and enhanced security capabilities.
• Ensure ongoing protection against evolving cyber threats.
• Simplify future lifecycle management with current-generation hardware.

Need Help Planning Your Migration?

WatchGuard partners are encouraged to review customer installations that still rely on Firebox T15 or T15-W appliances and begin migration discussions well in advance of the March 2027 End-of-Life date.

For details on the original retirement announcement, refer to the March 2022 End-of-Sale and End-of-Life notice for the Firebox T15 and T15-W.

Help customers prepare early for a smooth transition.

Support and customer-facing teams should familiarize themselves with the upcoming EOL timeline and recommended migration path to the Firebox T115-W. As customers inquire about hardware lifecycle planning, take the opportunity to educate them on the benefits of current-generation Firebox appliances and guide them toward proactive migration planning. Early conversations help avoid support challenges closer to the EOL date and ensure customers continue to receive the protection, performance, and support they expect from WatchGuard.

Support Focus: Educate customers, reduce last-minute escalations, improve migration readiness, and strengthen customer satisfaction.

For details on WatchGuard’s Global End-of-Life Policy, visit:
WatchGuard Global EOL Policy

For more information on our standard End-of-Life policy, visit:
WatchGuard Standard EOL Policy