Sophos Central enable Management on auxiliary device

Hi Ben,

Thank you for reaching out to Sophos Community.

Upon checking, I've registered my FW via CLI (stand alone)

• central-register --register -u Username -p Password -s Serial# on 5.Device Access 3. Advance Shell

However, the management is still not enabled and requires direct access to Sophos Firewall.

You may try the following KB

• Manage an HA pair in Sophos Central

Hello Erick,

this method, registering both HA nodes at once, has never ever worked for us. I once had a long run with a support ticket simply explaining what I was trying to do. They did not believe, didn't give me any useful advice and then we left this unresolved. Until recently when I did update some of our customers to 19.5.x, then I tried to register only the missing AUX node and suddenly this worked!

But the method you mentioned above never worked for me.

Hi jprusch,

Thank you for your feedback.

I'll check this and also report it internally, also would it be possible to share the case ID. Thank you

Hi Erick,

I did the steps that you shown here. If I register both devices at once, the primary device is connected and the auxiliary is in the status "Management disabled". I did not want to make an failover to register the aux device. 

I will send you my case ID as PM.

Ben

Hi,

If the Primary was already in the HA setup before being registered and managed on Central, then the Aux automatically will also be managed on Central.

Can you click the HA icon on central, show us the information displayed, and share it here?

Also, Upon checking your case, does the status color of the HA still orange and not green Icon?

Hi Erick, 

the firewalls itself shows a "green" status for HA. If I click on the HA icon on Central, I get redirected to the WebAdmin on the primary node of Firewall.

Ben

Hi, 

after I clicked on "Sync aux device" and added a "Peer administration" IP the HA status is shown as "green" in Sophos Central. 

Ben

Hi Ben,

Since the two devices are in sync, you can only manage the primary device in the Central. Once the Aux becomes the Primary, it’ll be the device that you'll be able to access.

Yes, I know. Now I have a working HA in Sophos Central again. Both devices are displayed as one HA array. 

Hi Ben,

That is great to hear.