Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

HA active-passive preferred primary device

Documentation says for HA active-passive you should select a preferred primary device, because "only the initial primary device holds the licenses and supports services, such as FastPath offloading.".

Does this mean if auxiliary appliance is currently active, it will not utilize fastpath at all?
So degraded performance & limited functionality while aux being master?

Can someone share details what restrictions apply in this case in detail?

I'd like to avoid selecting preferred master to reduce unneccesary ha-failovers, if possible.

From licensing point of view i'd really expect both nodes fully functional while being part of the cluster - no matter who's the license owner.



Added TAGs
[edited by: Raphael Alganes at 3:13 PM (GMT -7) on 15 Oct 2024]