End of Life Security Support Policy for Converged Infrastructure, Midrange and Enterprise Storage, and Storage Networking Products

Definitions

• End of Sales Life (EOL)

• End of Standard Support (EOSS)

• End of Security Support (EoSecS)

 

Summary

This policy provides details on the Dell Technologies Security Support Policy for the following products which have reached EOL:

• Atmos
• Centera
• Storage Center Dell Compellent (SC, Storage Center)
• Data Computing Appliance (DCA)
• FluidFS (8600)
• EqualLogic PS
• VMAX 450F or 850F AFA
• VMAX3 Hybrid
• VNX2 arrays
• VNXe3200
• XtremIO - X1
• XtremIO - X2

End of Security Support Period

Dell Technologies strives to provide security updates beyond EOL until the EoSecS date for the Products, as detailed below:
 

Product	EOL Date yyyy-mm-dd	Severity levels that were addressed in updates until one year before EoSecS	One year before EoSecS yyyy-mm-dd	Severity levels addressed in updates in the year before EoSecS	EoSecS Date yyyy-mm-dd	Severity levels addressed in updates after EoSecS
Atmos	2016-12-31	High and Critical	2020-12-31	Critical	2021-12-31	None
Centera Systems	2018-03-31	High and Critical	2022-03-31	Critical	2023-03-31	None
Storage Center Dell Compellent (SC, Storage Center)	2021-08-15	High and Critical	2027-08-31	Critical	2028-08-31	None
Data Computing Appliance (DCA)	2018-05-05	High and Critical	2021-12-31	Critical	2022-12-31	None
EqualLogic PS	2019-02-01	High and Critical	2023-02-28	Critical	2024-02-29	None
FluidFS (8600)	2018-08-03	High and Critical	2022-08-21	Critical	2023-08-31	None
PS arrays	2019-02-01	High and Critical	2023-02-28	Critical	2024-02-29	None
SC arrays	2021-08-15	High and Critical	2027-08-31	Critical	2028-08-31	None
VMAX 450F and 850F AFA	2018-11-02	High and Critical	2022-10-31	Critical	2023-10-31	None
VMAX3 Hybrid arrays	2019-09-30	High and Critical	2023-09-30	Critical	2024-09-30	None
VNX2 arrays	2018-01-31	High and Critical	2022-01-31	Critical	2023-01-31	None
VNXe3200 arrays	2018-01-31	High and Critical	2022-01-31	Critical	2023-01-31	None
XtremIO - X1 arrays	2018-08-08	High and Critical	2022-04-30	Critical	2023-04-30	None
XtremIO - X2 arrays	2022-01-28	High and Critical	2026-01-31	Critical	2027-01-31	None

Security vulnerabilities with a severity of medium or low may be addressed on a case-by-case basis. Consult the Dell Vulnerability Response Policy for more information about severity classifications and vulnerability remediation.
 

Security Update Cadence

Dell intends to release software updates for the above products until one year before EoSecS, as per the table above. These releases may contain both functional and security updates for high and critical security issues and are released at least once a year. Only critical security issues may be addressed during the year leading up to EoSecS. There may be exceptions depending on vulnerability impact, which are assessed on a case-by-case basis. For example, security updates may be released out of band depending on the assessed impact.

Dell reserves the right to modify this schedule at any time without prior notice.  
 

Where to obtain information about Security Updates

Dell Security Advisories and Notices are published to communicate information about known security vulnerabilities in Dell Products. Customers should consult those publications for official information about vulnerabilities and available mitigation or remediation.
 

Disclaimer

For supplier-supported third-party software (such as operating systems and bundled software) and non-Dell Branded third-party devices, software updates are delivered by the third-party supplier pursuant to applicable warranties, service contracts, or policies. Dell is not responsible for such updates.
 
Due to variations in product lines and dependencies on third-party component providers, Dell cannot guarantee that security support is generally available for all components of a given product until EOSS or that all components of a product are subject to the same period of security support (such as when support for a third-party component ends before the EOSS). Sometimes, mitigation of a security issue might require a move to a newer product.