• HA - Can I simply change the IP address in the peer administration setting afterwards?

    Mike Linnemann
    Mike Linnemann
    Hello everyone, I have a quick question regarding the HA combination of two XGS2100s. A customer has an active-passive HA. There are two interfaces in the peer administration settings. One is a management port and the other is port 1, but I cannot reach…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Outgoing emails bouncing in MTA mode

    Mohamadreza Rajabi
    Mohamadreza Rajabi
    I use two sophos xg 310 instances as HA they are on MTA mode, once upgraded to firmware version SFOS-20.0.1-MR-1-Build342 emails to some domains get bounced with error :"R=default_mx_router T=remote_smtp: all hosts for '[doamin.com]' have been failing…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • XGS 2300 HA friert sporadisch ein

    StefanS
    StefanS
    Hallo zusammen, ev. kenn jemand von euch dieses Verhalten. Wir haben hier ein HA mit XGS 2300 SFOS 20.0.1 MR-1-Build342. Ab und zu, relativ selten, kann es sein ,das kein DNS nach außen hin mehr geht, ev. werden einfach keine Neuverbindungen mehr aufgebaut…
    • 5 months ago
    • Sophos Firewall
    • German Forum
  • XGS 2100 | Fibre port not coming up after a reboot

    Pascal Meyer
    Pascal Meyer
    We currently have the problem that our customer has an HA configured with two XGS2100 and after a restart / failover test one of the fiber ports remains down and thus the entire network is paralyzed. As soon as I restart the firewall, the Auxiliary Sophos…
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS 126 von selbst ausgeschaltet

    Gerald Gleissner1
    Gerald Gleissner1
    Hallo, wie kann es sein das sich eine Sophos XGS einfach ausschaltet. Es sind 2 XGS126 im HA Cluster, Niemand war in dem Raum (Zugangskontrolle) Meldung das Primäre ausgefallen ist und auf Sekundäre umgeschaltet. Im Raum angekommen, LED leuchtet…
    • 5 months ago
    • Sophos Firewall
    • German Forum
  • Seeking Advice on HA Configuration Issues on VMware

    Michael9609
    Michael9609
    Dear Sophos Community Members, I hope this message finds you well. I am currently in the process of configuring High Availability (HA) on our VMware platform and have encountered an issue that I could use some assistance with. Here are the steps I…
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • How to force the SSH Main Menu from the Advnaced Shell?

    ff9394611
    ff9394611
    Hello, I work remotely for a customer and wanted to update the SSDs. It seems to me that when the SSD is updated, it might not happen in all HA devices. In order to make sure that is not the case, I SSH into the Primary device and from there I do…
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • High Availability Switch Config

    SophosNewby
    SophosNewby
    Good morning, I missed a critical step when designing our new HA upgrade, I completely forgot about the WAN side of things. To fix the issue, I came across this Sophos article and trying to follow how it is setup without using a Sophos switch. https…
    • Answered
    • 5 months ago
    • Sophos Firewall
    • Discussions
  • Firewall Cluster login to secondary over IPsec tunnel

    AlexanderPoettinger
    AlexanderPoettinger
    We have a series of customers with a firewall cluster but no local server infrastructure. Their resources are in our datacenter. There is always an IPsec tunnel from the datacenter to the firewall. We can always access the firewalls through the IPsec…
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • HA Upgrade Questions

    SophosNewby
    SophosNewby
    Good afternoon, I have a couple of question regarding an upgrade we are doing over the next couple of weeks. So we are replacing our XG 210 with 2 XGS 3100's and have some question to their setup in a Primary/Secondary HA configuration. 1) Do I simply…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • HA msync.log - many errors for "cmd 'ipset -D hostset" or "sesid:-1:evm slot has NULL for sd 10"

    LHerzog
    LHerzog
    I've a new XGS HA A/P cluster running on v20.0.1. The cluster is a migration from a retired XG system. All is running and looks fine so far. When checking logs, I found in the HA logs that this is filling with errors. Mostly the errors are always of…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Unable to connect remote vpn when secondary node as a primary.

    Kiran Jedhe
    Kiran Jedhe
    I am having an issue with an HA hardware pair. When the secondary node is the master SSL VPN users cannot connect with a remote VPN. Please help me on it.
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Help with Sophos HA

    Cleyton Goncalves
    Cleyton Goncalves
    I need help with that's cenario: HA Active-Passive Configuration ( Preferred primary device flag DISABLED ) : XG106_A > Initial primary ( initially with license ) XG106_B > Initial auxiliary At a certain point XG106_A stopped responding and XG106_B…
    • Answered
    • 6 months ago
    • Sophos Firewall
    • Discussions
  • Active - Passive Site

    Aleksej Buravliov
    Aleksej Buravliov
    Hello, I need help with configure StandBy site. Site A XGS2100 with HA Aruba 6200F Stack SW Servers Site B (SdantBy) XGS2100 Aruba 6200F Standalone Servers The FW configuration of FW01 and FW02 is identical. My ISP transfers…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • no internet access with auxiliary device

    Diego Forcella
    Diego Forcella
    Hi all, i have 2 xgs2300 (SFOS 20.0.0.0 GA-Build222) configured in active-passive high availability When i restart primary device and the auxiliary device became standalone it block outgoing traffic for hearthbeat (seen in the log) If i disable…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Disaster Recover Lcation

    Duc Parker Le
    Duc Parker Le
    I have a disaster recover location/co-location through 2 our ISP and would like to be able to continue operating mail and remote access servers if there were a disastrous event. we have a gigabit link between the buildings, I was thinking we could actually…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall HA Konfiguration (incl. Verkabelung)

    Hans-Juergen Guenter
    Hans-Juergen Guenter
    Guten Morgen, ich möchte gerne nun mal eine Sophos Firewall HA konfigurieren und ich habe mir auch schon dazu das eine oder andere Dokument angeschaut, aber ich werde dadurch noch nicht so ganz schlau daraus. Aktuelle Umgebung ist die folgende: …
    • 7 months ago
    • Sophos Firewall
    • German Forum
  • Firmware upgrade

    Reem Jalal Eddine
    Reem Jalal Eddine
    I am in a plan of performing a firmware upgrade to SFOS 19.5.4 MR4-Build718. I was wondering if I do the upgrade to the primary firewall will it be reflected to the secondary (HA, passive active)? or should I log in locally and perform the upgrade. …
    • Answered
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • HA has addressed, cause unknown several times

    StefanS
    StefanS
    Hi there, We have two XGS2300 (SFOS 19.5.3 MR-3-Build652) here in HA mode. Yesterday and today morning almost at the same time, HA has addressed. I cannot find a cause, both firewalls are accessible via their own IP and the HA cluster is green. How can…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • Setting up Sophos XG HA

    ciwan2
    ciwan2
    Hello Is it possible to set up/add another firewall to an existing XG for HA, Active-Active or active-passive? The Virtual XG is hosted in Azure. We just want to fail-over automaticly. I've followed this one but it did not work. Sophos Firewall…
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • after changing the ip address of the primary sophos , seconadry became faulty

    Egy Fat
    Egy Fat
    we are changing the network in our work, once we started to change IP address of primary Sophos to a different Ip in different subnet, the secondary became faulty. we have HA and configured well and working well too any clues?
    • 7 months ago
    • Sophos Firewall
    • Discussions
  • During the HA,When sophos primary is down , And the auxilary will lead would it take the same IP as the primary

    Egy Fat
    Egy Fat
    During the HA,When sophos primary is down , And the secondary will be the primary would it take the same IP as the primary sophos or not because i am making the sophos as my firewall facing internet , so my devices will have a route to the primary…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • Slow Browsing - XGS 4500 HA Version 20 GA

    Speedfish
    Speedfish
    Hello, we are experiencing some loading time issues with browsing though the web (slow browsing). The browser software doesn't matter here (Firefox, Edge, Chrome etc.) Quite often there is a loading time up to 10-15 sec for opening a normal website…
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • HA failing after Sophos upgrade to V.20

    eFrancis
    eFrancis
    After firmware upgrade from v.19 to v.20, HA failed to work and currently we are running on one FW.
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • HA Configuration Correct port must be monitored LAN port 1

    DevK
    DevK
    Whenever my LAN port switch restart my both the HA firewall restart why it happen
    • Answered
    • 8 months ago
    • Sophos Firewall
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>