Features
MSP-ready Device Keys
Why one key per firewall edge or HA cluster simplifies operations, support, tenant separation, and rotation.
Last updated: June 26, 2026
On this page
MSPs and resellers often manage many firewalls, sites, and customer environments. In these scenarios, feed quality is not the only thing that matters; traceability matters as well: Which customer uses which key, which device retrieves which feed, and what must be rotated during a change?
Cybora therefore works with clear device assignment. A license key is intended for one firewall edge or one logical HA cluster unless the agreement specifies otherwise.
Why device assignment helps
Clear key assignment supports:
- clean tenant separation
- traceable usage per customer or site
- targeted rotation after a leak or device replacement
- simpler support analysis
- predictable billing and resale
If a key is used in multiple independent environments, troubleshooting becomes harder. It also increases the risk that a necessary rotation affects multiple customers at once.
HA clusters and sites
An HA cluster can be treated as one logical edge when it protects the same perimeter and is operated like a single firewall system. Independent sites or customers should use their own keys.
Details about key handling are documented in Key Rotation.
MSP operations
For MSPs, the operational benefit is not only security, but standardization. The same feed approach can be used across multiple vendors while each customer keeps their own keys and firewall policies.