Heartbeat accross multiple Firewalls - somehow possible?

Question

Hi, 
 I found this old thread and would like to know if this has somehow changed. 
 https://community.sophos.com/sophos-xg-firewall/f/discussions/125923/can-heartbeat-information-be-shared-across-firewalls 
 My idea is to share HB accross multiple sites of our organization each with XG or XGS so a client with Intercept-X XDR that access servers behind different firewalls can access there also based on it's Heartbeat state. 
 Example below: 
 
 Client HQ can access Server HQ 192.168.1.100 with it's HB status. 
 if Client HQ wants to access Server Branch 192.168.200.200 where HB is also required, it is not allowed because Branch XG does not know HB status of Client HQ 
 This has the requirement and double administration of adding a new rule on Branch XG to allow access without HB from HQ net to Server Branch. 
 
 HB is advertised with synchronized security. So it would be really nice, if this is true for the whole organization and branch Firewalls within a Sophos Central account. 
 I'm sure LuCar Toni has the answer.

LuCar Toni · Answer

Sophos Heartbeat currently only supports one Peer per Endpoint. So you cannot Share the information of the current health status to other Firewalls. It will be always the first one to respond to the Connection. The connection is: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SophosCentral/SecurityHeartbeatOverview/index.html 
 You can bypass one firewall by using DNAT.

Heartbeat accross multiple Firewalls - somehow possible?

Top Replies