I've a new XGS HA A/P cluster running on v20.0.1. The cluster is a migration from a retired XG system. All is running and looks fine so far. When checking logs, I found in the HA logs that this is filling with errors. Mostly the errors are always of…

I need help with that's cenario: HA Active-Passive Configuration ( Preferred primary device flag DISABLED ) : XG106_A > Initial primary ( initially with license ) XG106_B > Initial auxiliary At a certain point XG106_A stopped responding and XG106_B…

Hello, I need help with configure StandBy site. Site A XGS2100 with HA Aruba 6200F Stack SW Servers Site B (SdantBy) XGS2100 Aruba 6200F Standalone Servers The FW configuration of FW01 and FW02 is identical. My ISP transfers…

Hi all, i have 2 xgs2300 (SFOS 20.0.0.0 GA-Build222) configured in active-passive high availability When i restart primary device and the auxiliary device became standalone it block outgoing traffic for hearthbeat (seen in the log) If i disable…

I have a disaster recover location/co-location through 2 our ISP and would like to be able to continue operating mail and remote access servers if there were a disastrous event. we have a gigabit link between the buildings, I was thinking we could actually…

I am in a plan of performing a firmware upgrade to SFOS 19.5.4 MR4-Build718. I was wondering if I do the upgrade to the primary firewall will it be reflected to the secondary (HA, passive active)? or should I log in locally and perform the upgrade. …

Hi there, We have two XGS2300 (SFOS 19.5.3 MR-3-Build652) here in HA mode. Yesterday and today morning almost at the same time, HA has addressed. I cannot find a cause, both firewalls are accessible via their own IP and the HA cluster is green. How can…

Hello Is it possible to set up/add another firewall to an existing XG for HA, Active-Active or active-passive? The Virtual XG is hosted in Azure. We just want to fail-over automaticly. I've followed this one but it did not work. Sophos Firewall…

we are changing the network in our work, once we started to change IP address of primary Sophos to a different Ip in different subnet, the secondary became faulty. we have HA and configured well and working well too any clues?

During the HA,When sophos primary is down , And the secondary will be the primary would it take the same IP as the primary sophos or not because i am making the sophos as my firewall facing internet , so my devices will have a route to the primary…

Hello, we are experiencing some loading time issues with browsing though the web (slow browsing). The browser software doesn't matter here (Firefox, Edge, Chrome etc.) Quite often there is a loading time up to 10-15 sec for opening a normal website…

After firmware upgrade from v.19 to v.20, HA failed to work and currently we are running on one FW.

Whenever my LAN port switch restart my both the HA firewall restart why it happen

According to this article we can configure PPPOE on active passive but it is not working docs.sophos.com/.../index.html

A firewall is configured in HA, Active-Active mode, can it cater double the size of users it is designed for? Ex. XGS3100 (2nos) configured in HA, Active-Active load balancing mode. Can it Cater 1000 concurrent users?

Hi Folks I've noticed several similar issues with HA Sophos Firewall on some end customers. We use Active-Passive HA. When primary firewall crashes for some unknown reason (I'll check more information to understand at community.sophos.com/.../finding…

Hi all, xg330 on HA I had my HA mounted almost a year ago and I remember well that I wrote down the admin passwords for the primary and secondary device for my HA pair. Today, I just wanted to access the secondary to check a few points, but I discovered…

I try to setup interactive HA on XGS 126 SFOS v20 I used to setup devices this way, now I must use the same IP range for HA and management? The HA Link should be /30 network with only the HA IP - why must the management IP be in the HA network? …

Hello, in the last weeks our XGS2100 Firewall cluster rebooted itself a few times - and there's no real pattern. Without warning I receive this email: Dear Administrator, You are receiving this auto-generated message from Sophos Notification System…

Hello together, I was wondering whether it is still possible to ssh into the slave node of a Sophos XGS cluster in active-passive?

Hello, I am looking to confirm if the below is feasible. We have a HO and BO. The BO hosts a number of production servers and so there is an SD-WAN Connection Group that connects the two firewalls and allows certain services to certain VLAN networks…

Hi All, We have 2 Sophos XG Firewalls setup in HA and using NTLM / Kerberos authentication. We notice that in Active directory there is only one firewall computer account showing and was wondering if that is ok or if there should be 2 accounts …

Hi, I tried to access the auxiliary devices of several our customers via an ssh tunnel using "ssh -D 7777 admin@firewall.customer.xyz" and than using localhost:7777 as socks proxy in Firefox. There I use the peer administration IP on port 4444 to access…

I need to know which of these files ( ctsyncd.log, applog.log, msync.log ) or another log shows me the communication between Sophos A and Sophos B (Active and Passive Ha Mode) about changes from active to passive firewall. How do I identify this in the…

Hi there, we are just implementing a management vlan in our network. Therefore I added the mgmt-vlan on one of our 2 main-connections to the coreswitch. Management of switches and servers is working properly. Last step would be to manage our XGS active…