XG Firewall v18 MR-4: Feedback and experiences

Updated From MR3 to MR4  Active/Active HA Software Appliance . System Is working Fine. Now Shown In Central as HA . Good work.

BR

Vishvas

- HA cert sync finally looks fixed hooray, thus you need to deregister both appliances first.

- Messages on the dashboard: This tombstone still remains, even not synced between devices in HA, when you failover you have different messages. Why can we now clear theese once and for all??

What's behind theese (in more detail)?

• Improved FastPath performance for Active-Passive pairs

• Improved high availability setup and upgrades

For XG Appliances, running in Active-Passive, we can accelerate more performance with the new fastpath technology. You should see more performance throughput on XGs running in Active-Passive. 

The HA Setup process is improved, hence it will show more information, if the setup process missed something and failed. Instead of showing "Failed", it shows more information, what caused the failed setup process. Also the upgrade shows more alert in case of failure. 

Thanks for the quick reply :-)

I have just tried to update my Active-passive setup and it denied it what ever I did.

I then de-activated the HA Pair, and defaulted the original setup.

I have now been waiting for the HA setup to continue which is taking soo long.

I will then refresh the page, and go to system and it just sits there refreshing the page.

it was all working fine from 17.5 up to 18 mr3, but now nada, any ideas, I will have a look at the logs when I can

What do you mean by "it denied it"? How did you build up the HA? 

the deny it that I could not update the HA pair while it was active, and would not update the firmware.

Did you upload & boot the new firmware and did you doublecheck the correct firmware used? Also did you verify in the logs, if the was a alert about this deny? Because i upgraded by now, multiple HAs and never had this issue.

Do you have a screenshot of this? 

Haven't checked the logs yet
but this is what I am left with

now going to system services, it just sit there, waiting for it to refresh the page .... it's been there for over 20mins even though there is not passive unit attached, and it was doing this as well for well over an hour when it was attached.

I did a reboot (on both units) before I started, and then tried to just upload the new firmware and that is where I was not allowed to upload the firmware.

this is when I de-activated the HA Pair, and updated the firmware ...tried to re-create the pair, and that is the last full action.

I am now trying to find a way to de-activate HA from CLI