Sophos Firewall is now available as HA and AA deployment options from the AWS marketplace to support redundancy and zero downtime for your cloud deployments.

Deployment models

High Availability (HA)

The goal of this deployment model is to increase availability of the Sophos Firewall by adding an additional node to provide redundant failover to the regular Sophos Firewall stand-alone deployment.

For Sophos Firewall HA deployment in AWS, refer to the following step-by-step instructional document available on the following link:

• https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/129071/sophos-firewall-ha-active-passive-deployment-with-amazon-transit-gateway-tgw-in-aws 

Active - Active (AA)

This model expands upon the previous setup by enabling ECMP to not just provide failover, but also share network workload between multiple firewall nodes. This enables flexible performance scaling of the Sophos Firewall deployment for both inbound and outbound traffic by adding additional firewall nodes to the setup.

For Sophos Firewall AA deployment in AWS, refer to the following step-by-step instructional document available on the following link:

• https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/129075/sophos-firewall-aa-active-active-deployment-with-amazon-transit-gateway-tgw-in-aws 

With special thanks to JVP and JornLutters