Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions Active-Passive with NO port monitoring

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 5 replies
Subscribers 39 subscribers
Views 10908 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active-Passive with NO port monitoring

@wajdiaa over 6 years ago

Curious:

Any takes on what happens when HA Active-Passive is enabled but without any port monitoring? Will it fail-over in case of power unplugging or other hardware breakdown?

This thread was automatically locked due to age.

Parents

+1 Karlos over 6 years ago

Hi Wajdi,

Without any ports monitored, failover will not occur, as it will not be able to detect the port go down.

Thanks,
Karlos

Karlos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+1 Karlos over 6 years ago

Hi Wajdi,

Without any ports monitored, failover will not occur, as it will not be able to detect the port go down.

Thanks,
Karlos

Karlos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 @wajdiaa over 6 years ago in reply to Karlos

Hi Karlos, I tried upgrading firmware with no port monitoring on HA and it seams to work. The master upgraded the secondary, failedover, upgraded the primary and later fallback to master. Is it standard operation for updates?
Cancel
Vote Up 0 Vote Down

Cancel
0 Anish Deval over 6 years ago in reply to @wajdiaa

Yes, that is the standard process for upgrades, but whether actual failover will take place or not (in case of power event), you will have to test and update as well !
Cancel
Vote Up 0 Vote Down

Cancel
0 MDB over 6 years ago in reply to Karlos

So, in case of Primary Hardware Fault, the secondary, without port monitoring, will not take the Virtual MAC and become Active?

The support have reported me that in case of no monitoring, a hardware fault will be covered by HA
Cancel
Vote Up 0 Vote Down

Cancel
0 @wajdiaa over 6 years ago in reply to MDB

This is correct. Failover WILL occur with only the HA cable connected and NO port monitoring.
Cancel
Vote Up 0 Vote Down

Cancel