XG210 upgrade to XGS2100 in HA active-passive configuration

Hello,

Thank you for contacting Sophos community!

Kindly review below and validate:

https://docs.sophos.com/nsg/sophos-firewall/reference/backup_restore/port_mapping/en-us/index.html

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/BackupAndFirmware/BackupAndRestore/BackupAndRestore20MR2/BackupAndRestoreInterfaceMapping/index.html#restore-ha-backups

Please do let us know if you still have any concerns in it.

it's no problem to do that. Follow the links already posted. Be sure, to bring both devices to the latest Firmware and restore from latest version XG to same version on XGS. You need to adjust some Interfaces but you can prepare the XGS machine while disconnected from the network and when ready simply plug the cables from one to the other. You only restore the primary node. HA needs to be rebuild on XGS after the first node runs. 

Thank you for the responses.  One more question, on the HA machine, do I need to do the initial setup or leave it "out of the box" state and join it to HA?  These units were setup before I started working with them and have never touched the HA part of Sophos devices.

You can try this one:  Sophos Firewall: Replace an XG Firewall with an XGS Firewall by using Zero Touch Deployment  

Thank  you for the link.  That one helped with the process.  I appreciate all the others but this one was the step by step that I needed.  One more question, I have RED connections setup with the existing set, will they transfer over to the new firewall or will they have to be setup again?  I can be prepared if they will need to be setup again, just want to make the actual physical transition as quick and painless as possible.

REDS will transfer.