DSCP on WAN to LAN

Question

Hi All, 
 DSCP, Primary and Backup Gateway can be configured on network rule while it cannot be configured on Business Application Rule. 
 What I am trying to achieve is to publish a web server on 2 Public IPs. If the first internet connection goes down, the requests goes to second connection. 
 Using BAR, you can configure IP list but the algorithm used is Load Balancing rather than Failover. Is it possible to force this configuration? 
 Maybe an improvements in later versions? 
 I can use WAN LInk manager and configure the second WAN as backup, but for rules where DSCP is used, if I set the second wan as the first gateway, the rule will always choose the Primary WAN, or not? 
 Thanks.

sachingurung · Accepted Answer

Hi, 
 Greetings. 
 I did some R&D and what I found is, Cyberoam supported DSCP over Virtual hosts. Strangely, I didn't find the option in XG. Hence, DSCP on a Business Application rule is not be possible. 
 Request you to raise a Feature Request from here: feature.astaro.com/.../330219-sophos-xg-firewall 
 If you are trying to achieve a Fail-over to publish a Web Server on 2 Public IP addresses, then you can configure two separate Business Application Rules for same Web Server. Next, you can host your domain's A-record on these two IP address and prioritize one of the IP. This can be a useful workaround until a Failover feature is implemented. 
 Hope that helps:) 
 Thanks 
 Sachin Gurung