migration fw xg to xgs

Hello Gerardo,

Good day and thanks for reaching out to Sophos Community.

Kindly refer to this backup and restore compatibility KBA This also includes information on HA.

KBA for restoring v20MR1 or earlier: https://support.sophos.com/support/s/article/KBA-000004277?language=en_US

for restoring to v20 MR2 and later: https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/BackupAndFirmware/BackupAndRestore/BackupAndRestore20MR2/index.html

Hope this helps and thank you for choosing Sophos. 

Regards,

Thank you very much for the information.

Should I first update my XG to version 19.5? Or can I do the migration with my current version 19.0.2 MR-2 Build472

To get this wizard, you need at least 19.5 MR3 on the XG Hardware. Otherwise it will be a "normal backup and restore" and Sophos will choose the interfaces. 

But you could perform on the XGS another backup and restore afterwards to select the interfaces as needed. 

To get this wizard, you need at least 19.5 MR3 on the XG Hardware. Otherwise it will be a "normal backup and restore" and Sophos will choose the interfaces.

But you could perform on the XGS another backup and restore afterwards to select the interfaces as needed.

Thanks for your reply. Regarding the first point, what problems could I have if Sophos chooses the interfaces?

Can you please give me more details on the second point you mentioned:
"But you can perform another backup and restore on XGS afterwards to select the interfaces as needed."

PD:

I'm only using 1 port towards the WAN and one port for the HA

Thanks

To get this wizard, you need at least 19.5 MR3 on the XG Hardware. Otherwise it will be a "normal backup and restore" and Sophos will choose the interfaces.

But you could perform on the XGS another backup and restore afterwards to select the interfaces as needed.

Thanks for your reply. Regarding the first point, what problems could I have if Sophos chooses the interfaces?

Can you please give me more details on the second point you mentioned:
"But you can perform another backup and restore on XGS afterwards to select the interfaces as needed."

PD:

I'm only using 1 port towards the WAN and one port for the HA

Thanks

Then you can simply use the Backup Restore without the current version. No worries, it will work. 

Thanks. Since this is an HA (A-P) scenario, should I restore the backup only on the XGS computer that will be the primary one? or on both?

Is it true that I have to disassemble the HA to do the backup migration on just one XGS 4500 and then reassemble the HA? Or what other options would I have?