Sophos Community
  • User
  • Help
  • Site
  • Search
  • User
  • All Groups
  • Knowledge Base
  • Community Blog
  • Member Recognition
  • More
  • Cancel

Knowledge Base

  • Advisories
  • +CyberoamOS
  • +Data Control and DLP
  • Email Appliance
  • +Endpoint Security and Control
  • +Free Tools
  • +General
  • +Mobile
  • +PureMessage
  • +Reflexion
  • +SafeGuard encryption
  • +Server protection
  • +Sophos Central
  • Sophos Clean
  • Sophos Home
  • +Sophos UTM 9
  • Web Appliance
  • +XG Firewall
Tweets by SophosSupport

Sophos XG Firewall: FAQ on High Availability (HA) licensing

  • Article ID: 125612
  • Updated: 1 May 2019
  • 7 people found this helpful
  • Available in: English | Español | Italiano | 日本語 | Français | Deutsch

Overview

This article answers the frequently asked questions on High Availability (HA) licensing.

The following questions are answered:

  • What licenses do I need when I have 2 appliances in High Availability mode
    • For Active-Active mode
    • For Active-Passive mode

Applies to the following Sophos products
Sophos XG Firewall Software

What licenses do I need when I have 2 appliances in High Availability mode

For Active-Active mode:

  • Each appliance requires its own subscriptions and the active subscriptions must match on both appliances.
  • Sandstorm does not affect the HA setup regardless of the expiry date in each device.

For Active-Passive mode:

  • Only the Active appliance requires subscriptions and SF-OS will ensure that the Passive appliance has a copy of those subscriptions, so it can take on processing if the Active appliance fails.
    It is therefore vital that the subscriptions are activated on the intended Active appliance and one has to ensure that HA is enabled only from the appliance which has a valid subscription.
  • If a Software/Virtual device is used, you need to purchase only one Base license and once that Serial Number is registered, SF-OS will manage the creation of the Passive appliance; there is no need to purchase a separate Base Firewall license for the Passive device or a separate serial number.

Note: Active/Passive is not yet available for XG in Azure.

Related information

  • XG Firewall: Licensing guide
  • XG Firewall: FAQ on activating XG license keys
  • XG Firewall: FAQ on the migration of Sophos SG, Cyberoam NG, and iA licenses
  • XG Firewall: FAQ on new registration
  • XG Firewall: Activation and registration error messages

Feedback and contact

If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.
This is invaluable to us to ensure that we continually strive to give our customers the best information possible.

Article appears in the following topics
  • XG Firewall

Did this article provide the information you were looking for?

Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.

  • Submit
Sophos Footer
  • T&Cs
  • Help
  • Cookie Info
  • Contact Support

© 1997 - 2019 Sophos Ltd. All rights reserved.