Why should I consider upgrading my Gen 7 firewall to Gen 8

Why would I look at upgrading from my Gen 7 firewall to a new Gen 8 firewall?

One of the primary reason is the small cost difference. If your current Gen 7 firewall is running the Advanced Protection Security Suite (APSS), the cost to renew APSS for 3 Years is similar to buying the Secure Upgrade (3 Years) for the replacement model e.g. TZ470 > TZ480.

We are also now seeing some additional security features and benefits with 8.x firmware over 7.x firmware, and will only increase. For example, as of October 2026 Gen 8 gets you these (that you don't get with Gen 7 firmware):  

• Let's Encrypt Integration
• Two-Factor Authentication for GVC
• Indicator of Compromise (IoC) – Hash Detection

Gen 8 hardware may also give you benefits with connectivity. Using the TZ470/TZ480 again as examples, the TZ480 supports 5G SFP+ whereas the TZ470 only goes to 2.5G SFP+. General throughput has also increased.

Moving from Gen 7 to Gen 8 should also be relatively easy, since you can migrate the existing config onto the new appliance.

Model upgrades:

TZ270 > TZ280
TZ370 > TZ380
TZ470 > TZ480
TZ570 > TZ580
TZ670 > TZ680

NSa 2700 > NSa 2800
NSa 3700 > NSa 3800
NSa 4700 > NSa 4800