Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • No Peer administration settings with VLAN Devices

    Have I seen it right, that die Feature 'Peer administration settings' under HA is not working if my main Interface is an VLAN Device? The VLAN Interface is not in the list of selectable interfaces. Only the parent LAG device (which stupidly needs an…
  • fwcm-heartbeatd issue

    Hello Sophos Family, Its Hakan from Turkey. I have fwcm-heartbeatd issue on HA structure (aux firewall). AUXILARY FIREWALL SS: PRIMARY FIREWALL SS: I have 2 firewall with HA structure. Primary one registered to sophos central on central…
  • HA issue

    Hi, Once we have updated the new released firmware SFOS 18.5.1 MR-1-Build326 observed there is an internet fluctuations between the Primary and Auxiliary firewall, also there is an HA(High Availability ) was Failed to discover the secondary device…
  • How to generate a CTR on an auxiliary device

    Hello Community, I have a failover and want to generate a CTR on an auxiliary device, what should I do? The appliance is the XG 550. The HA configuration is Active-Passive. Currently, the Primary device has failed and is failing over. Thanks,
  • Sophos XG330 - 18.5.1 - HA (Active-Passive) - Primary - Webinterface Admin extrem slow and not all informations show

    Hello Community, three days ago we installed the update to 18.5.1 on our XG330. This is in the HA (Active-Passive). The days after that it ran without any problems. As of today, the admin web interface is extremely slow and not all informations show…
  • HA (active-passive) XG Firewall with dell os10 vlt

    Hello I'm trying to set up a sophos xg firewall HA in active-passive mode in a lab to implement in real life later. I want to connect this with 2 dell OS10 in VLT for a redundant setup (like in the picture). VLT to the cisco switch works as it should…
  • High availability firmware upgrade (small question just to be safe)

    I've inherited a HA-setup with two XG's (Active / Passive). I now want to upgrade them to the latest firmware. From what I've been able to gather I should simply logon to the web-gui on the Primary one and do a standard upgrade as if it was a standalone…
  • Upgrading 17 to 18 experiences would and criticism

    Hi, I'm looking for users advice and experience for upgrading to 18, especially directly from 17.5 to latest 18 . I'm thinking about upgrading in the next days, but we have a critical organization and I'm reading of several criticism especially…
  • License expiry - what happens to the cluster

    Hello, I have a question regarding the behaviour of the SFOS HA function. What will happen, if the license expires? I know that for example a UTM Cluster would shutdown the secondary node. Thanks.
  • Sophos Firewall: AA (Active-Active) deployment with Amazon Transit Gateway (TGW) in AWS

    Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Introduction Prerequisites…
  • Sophos Firewall: HA (Active-Passive) deployment with Amazon Transit Gateway (TGW) in AWS

    Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Introduction Overview Prerequisites…
  • XG135 18.0.3 MR3 Upgrade with HA

    When attempting to upgrade to MR4 from MR3 in the past the upgrade crashed out and would not complete. I worked with support and we rolled back. I was advised not to upgrade from MR3 to MR4 as there were issues with HA upgrades. Is it currently safe to…
  • Upgrading to v18 causes HA Pair to stop working and caused 3 minute Disruption

    I had the same problem. I have 2 XG750's in HA and it broke HD cluster when doing the update. That caused our company a 3 minute disruption in internet access. I thought HA stands for High Availability? I was running V17.5 MR15 on both XG750's. The…
  • Does Active-Active HA support more users?

    Hi Guys, My company bought a Sophos XG135 a few months back. At that time we had around 85 users and Fortigate technical person suggested that it will handle up to 100 users in our environment. Now, we have around 70 more people who joined our company…
  • high availability mode wont activated!

    Hi, i have 2xXG330. I want to use high availability mode. (Primary Activ/Passiv) with QuickHA. On the secondary i use same passwort and secudandy mode. Starts on both QuickHA detection, but not working. 1. Both uses PORT8 (one lan cable from…
  • V18 MR4 to MR5 upgrade and Scan outgoing email issue

    HI, i have two queries: Query#1:i have 2xXG450 configured in Active-passive HA, it is configured with AD for user authentication. when i was upgrading fromV17 to v18MR4 then i faced issue that authentication stop working. HA status was also disturbed…
  • Swapping out HP for Sophos Meraki Switches Patching redundant Ports

    Hi, We are amidst a network change from HP Curve Switches to Meraki, the network it self is an inherited mess, and am in the process of tracing the cables from our primary and HA Sophos devices, in order to patch into the new Meraki switch. I would…
  • XGFirewall Update HA Firmware Error

    Good Morning! I have two XG135 Firewall equipment. They were HA configured and firmware SFOS15.5. To carry out the firmware update process, I removed the HA as requested in the update screen, but after performing equipment 2 it was no longer recognizable…
  • How to setup Sophos XG Firewall HA (Active/Passive) in AWS?

    Anybody know how to setup Sophos XG firewall HA(Active/Passive) in AWS? Single VPC and multi-AZ. Is it possible if I use ELB and Single Node Auto Scaling?
  • HA failover taking a long time (Hyper-V)

    I'm in the process of trying to add a second XG VM in my production environment to allow for HA. As part of that I spun up two test machines to ensure I was comfortable with how everything failed over, the behavior of IPSEC tunnels, etc. So in my environment…
  • Upgrading 17.5.15 to 18.05 MR5

    Hi there, We are due to upgrade our current XG210's (in HA) to v18 MR-5 and to be honest, I'm really not looking forward to it. I never seem to fear upgrading our Sonicwall firmware, which is always flawless, but Sophos makes me have sleepless nights…
  • Some strange things about HA

    I am setting up a new Active-/Passive XG cluster. I did some testings and the results seem a bit strange to me. HA was completely up and running. I deactivated HA from the auxiliary/passive device (should that be possible at all?), then this device…
  • urgent: change ha port without destroying cluster

    Hi all, someone knows an way to change the HA-Link-Port? ... without disabling and rebuild HA? Thanks!
  • HA zwischen XG Box und XG virtuell konfigurierbar ?

    Guten Morgen in die Runde ich habe eine Sg230 im XG Modus und möchte diese gegen Ausfall absichern. Kann ich parallel eine virtuelle XG aufsetzen und dann eine HA Kopplung erreichen? Meine bisherigen Versuche mit SG230 und XG230 scheinen wegen unterschiedlicher…
  • I can only access the web GUI from the same subnet.

    Hello All, I am new to Sophos and I am attempting to configure an XG310 to work in Active-Passive as our backup to our primary FW. I went through the initial setup and assigned a static IP to the FW but I can only access the web GUI from the same subnet…