Setting up Sophos XG HA

Hi,

they both need to be there same model, revision and firmware version.

Ian

they're XG v19. So I need to add same FW with same public IP? is there a documentation how to do it?

That is firmware, what about hardware?
ian

i can’t add the required link at the moment. Please search in documentation for setting ha.

SFV2C4

We purchased it from Ms Azure portal.

I've tried to search, no joy..

Sorry, my mistake, I thought you were asking about physical boxes.

if the provided document didn’t work for you, you should  connect to a sophos partner and pay for assistance.

ian

Azure does not support the HA System by Sophos.

SFOS uses a multicast approach --> and multicast is not support in Azure. Same with virtual IP.

You need to use the load balancing.

Toni. Thanks for reply. Do you have a doc for loadbalancing? To add an XG to the existing infra?

As you mentioned, the KB above is the only guide:  Sophos Firewall: Implement a full HA (inbound/outbound) on Azure if this is not working, you can raise your issues in the thread.

In bigger installations, you can raise it with your sophos partner.

So there is no proper KB for configuring HA on an existing infra? (with one Xg no LB) above KB is for a brand new, from scratch set up.

Not a HA. As you need two separate firewalls, which are independent of each other, this is not easily possible.

You can contact Sophos professional service to get installation assistance.