I want to add HA enabled, 2 new 18.5 MR2 XGS136 firewall HA A-P clusters from the default ungrouped group to an other custom sub-group I created earlier
When trying to do so I get the error on safe for both of the HA clusters
One or more HA Firewalls are not in an acceptable state. Please wait until HA has been established and then try to move them to the group.
Of course HA is fine and synced. A reboot does not help.
XGS shows also all is fine:
central firewall management is working to these firewalls
what can I do to solve this issue?
OK, that's a bug from my perspective.
This does not work, until you do the first HA failover. So the aux node MUST have been active and communicating with central at least once.
After the first manual…
After the first manual HA failover, this works.
See screenshot: HA is green but when you move the mouse over HA, it shows aux "not available"
After manual HA on the XGS cluster:
See screenshot: HA is green and shows primary and aux as green
unfortunately this is a typical Sophos issue.
support case: 05276729
it has been fixed by the sophos central team