https://community.sophos.com/sophos-xg-firewall/f/discussions/136640/dmz-in-ha-active-passive-modeHello, Im trying to implement HA active-passive and i want to know what is the purpose of DMZ between the active/passive firewall, and if it&#39;s mandatory or i can ignore it. Thank you.en-USTelligent Community 12https://community.sophos.com/thread/506737?ContentTypeID=1Tue, 27 Sep 2022 10:07:56 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:1e05d534-5e44-4b64-9996-8d9418ac1007MMASLOUH<p>Hello <a href="/members/bharat-j">Bharat J</a>,</p> <p></p> <p>Thank you.</p><div style="clear:both;"></div>https://community.sophos.com/thread/506731?ContentTypeID=1Tue, 27 Sep 2022 09:39:39 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:a38cfdc0-f316-4a6a-8aae-82d6b8ad26efBharat J<p>Hi&nbsp;<a href="/members/mmaslouh">MMASLOUH</a></p> <p>To meet requirements before HA can be configured.</p> <ul> <li>The dedicated HA link port must be a member of a zone with the type DMZ, and have a unique IP address on both devices.</li> <li>You must turn on SSH, on the DMZ/Custom zone, for both devices.&nbsp;</li> </ul> <p>You can use Custom Zone for HA :&nbsp;</p> <p><img alt=" " src="/resized-image/__size/1280x960/__key/communityserver-discussions-components-files/126/pastedimage1664271564025v1.png" /></p> <p><a href="https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/AboutHA/HAPrerequisitesStartupGuide/index.html">https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/AboutHA/HAPrerequisitesStartupGuide/index.html</a>&nbsp;</p> <p>Regards</p><div style="clear:both;"></div>