This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG135 HA Error

Hi everyone,

I have two XG135 boxes and when I try to activate the HA I get the message "Firmware version mismatch with peer device".

All boxes have the same firmware version: SFOS 18.5.1 MR-1-Build326.

Any suggestions to fix?

Thanks

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 3 years ago in reply to Galperti do Brasil +1 verified

Its a REV2 and a REV3. Therefore HA is not possible. See: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/haStartupGuide/concepts/HAPrerequisitesStartupGuide.html#…

0 emmosophos over 3 years ago

Hello Galperti,

Thank you for contacting the Sophos Community.

What is the output of the following command on both devices?

console> system diagnostics show version-info

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Galperti do Brasil over 3 years ago in reply to emmosophos

Box A

Appliance Model: XG135
Firmware Version: SFOS 18.5.1 MR-1-Build326
Firmware Build: 326
Firmware Loader version:
HW version: XN02
Config DB version: 18.507
Signature DB version: 18.507
Report DB version: 18.507
Webcat Signature version: Not Available
Web Proxy version: compiled
SMTP Proxy version: 1.0
POP/IMAP Proxy version: 1.0.0.3.4
Logging Daemon version: 0.0.0.17
AP Firmware: 11.0.016
ATP: 1.0.0384
Avira AV: 1.0.417822
Authentication Clients: 1.0.0019
Geoip ip2country DB: 2.0.007
IPS and Application signatures: 18.18.65
Sophos Connect Clients: 2.1.001
odt: -
RED Firmware: 3.0.007
Sophos AV: 1.0.17229
SSLVPN Clients: 1.0.009
Hot Fix version: 2

Box B

Appliance Model: XG135
Firmware Version: SFOS 18.5.1 MR-1-Build326
Firmware Build: 326
Firmware Loader version:
HW version: XN03
Config DB version: 18.507
Signature DB version: 18.507
Report DB version: 18.507
Webcat Signature version: Not Available
Web Proxy version: compiled
SMTP Proxy version: 1.0
POP/IMAP Proxy version: 1.0.0.3.4
Logging Daemon version: 0.0.0.17
AP Firmware: 11.0.016
ATP: 1.0.0384
Avira AV: 1.0.417806
Authentication Clients: 1.0.0019
Geoip ip2country DB: 2.0.007
IPS and Application signatures: 18.18.64
Sophos Connect Clients: 2.1.001
odt: -
RED Firmware: 3.0.007
Sophos AV: 1.0.17223
SSLVPN Clients: 1.0.009
Hot Fix version: N.A
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni over 3 years ago in reply to Galperti do Brasil

Its a REV2 and a REV3.

Therefore HA is not possible. See: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/haStartupGuide/concepts/HAPrerequisitesStartupGuide.html#:~:text=The%20devices%20must%20have%20the%20same%20subscription%20modules%20enabled.,expiry%20date%20in%20each%20device.&text=No%20license%20is%20needed%20for%20the%20auxiliary%20device.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 emmosophos over 3 years ago in reply to emmosophos

Hello Galperti,

Thank you for the output of the commands.

As Luca mentioned, the revision numbers are different so HA can't be configured.

I would recommend you to reach out to your Account Manager or Sales Rep so they can help you get a device with the same Revision Number.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +1 Vote Down

Cancel