This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Setting up Sophos XG HA

ciwan2 6 months ago

Hello

Is it possible to set up/add another firewall to an existing XG for HA, Active-Active or active-passive? The Virtual XG is hosted in Azure. We just want to fail-over automaticly.

I've followed this one but it did not work.

Sophos Firewall: Implement a full HA (inbound/outbound) on Azure

Thanks

This thread was automatically locked due to age.

Top Replies

LuCar Toni 6 months ago +2 suggested

Azure does not support the HA System by Sophos. SFOS uses a multicast approach --> and multicast is not support in Azure. Same with virtual IP. You need to use the load balancing.

Parents

0 LuCar Toni 6 months ago

Azure does not support the HA System by Sophos.

SFOS uses a multicast approach --> and multicast is not support in Azure. Same with virtual IP.

You need to use the load balancing.

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Reply

0 LuCar Toni 6 months ago

Azure does not support the HA System by Sophos.

SFOS uses a multicast approach --> and multicast is not support in Azure. Same with virtual IP.

You need to use the load balancing.

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Children

0 ciwan2 6 months ago in reply to LuCar Toni

Toni. Thanks for reply. Do you have a doc for loadbalancing? To add an XG to the existing infra?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 6 months ago in reply to ciwan2

As you mentioned, the KB above is the only guide: Sophos Firewall: Implement a full HA (inbound/outbound) on Azure if this is not working, you can raise your issues in the thread.

In bigger installations, you can raise it with your sophos partner.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 ciwan2 6 months ago in reply to LuCar Toni

So there is no proper KB for configuring HA on an existing infra? (with one Xg no LB) above KB is for a brand new, from scratch set up.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 6 months ago in reply to ciwan2

Not a HA. As you need two separate firewalls, which are independent of each other, this is not easily possible.

You can contact Sophos professional service to get installation assistance.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 ciwan2 6 months ago in reply to LuCar Toni

Basically what I am trying to achieve here to load the balance to firewall when it get too much data, hits, instead of dying, it should fail to other firewall. What do you mean by contact the sophos professional service?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 6 months ago in reply to ciwan2

You can buy assistance from Sophos for your installations. https://www.sophos.com/en-us/support/professional-services

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 ciwan2 6 months ago in reply to LuCar Toni

Ok. So not as simple as adding a new xg and configure it with HA with my understanding.... Thanks
Cancel
Vote Up 0 Vote Down

Cancel