"Switch to passive device" CLI command

Hi Emre,

Thank you for reaching out to Sophos Community.

What are the errors when accessing the web interface?

Have you tried to check the following RR for the  following

•  Sophos Firewall: What to do when the Web Admin is not accessible 
• Reset your admin password using the CLI

For managing HA. you may refer to the HA. 

docs.sophos.com/.../index.html

I get an error like in the picture below and this is the error of my primary device

As I said above, if I find the CLI command I am looking for, my problem will be solved since there is no such error in the web interface on my Auxiliary device.

Hi Emre,

Thank you for sharing the error

Would it be possible to go to the advanced shell and use the below command to restart the service?

service tomcat:restart -ds nosync

I restarted the service several times but with no positive result.

I also restarted the device, still nothing.

Hi Emre,

You restarted the device, and it didn’t switch to Primary? Correct me if I am wrong

I would recommend to reach out to Support and create a case. 

kindly collect the tomcat logs, and kindly share the case ID here for monitoring. This might be related to  NC-119514.

cd /log

tail -f tomcat.log

Thank you very much for your help and feedback.

I will post the logs here tomorrow. Right now the primary device is off and I can access the web interface through the auxiliary device.

I do not think there is any problem with the HA structure.

As I said, I think if I turn the primary device to the auxiliary device with CLI commands, the problem will be fixed because I can access the web interface when the primary device is off.

Thank you very much for your help and feedback.

I will post the logs here tomorrow. Right now the primary device is off and I can access the web interface through the auxiliary device.

I do not think there is any problem with the HA structure.

As I said, I think if I turn the primary device to the auxiliary device with CLI commands, the problem will be fixed because I can access the web interface when the primary device is off.