Hi everyone, I have a challenge managing two firewalls (FW1 and FW2) in two different data centers (DC) that are far apart. In DC1, I use FW1 for IPSec tunnels with my clients. I want to add some details: We don't plan to use a FW cluster. We have only one IP address for the IPSec VPN. We don't use a DNS A record for this IP. My question to the community is: Is there a way to set up IPSec High Availability (HA) without a FW cluster and considering these limitations? I'm looking forward to hearing about your experiences and suggestions. Thanks in advance!

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec HA in 2 different data center

Hi everyone,

I have a challenge managing two firewalls (FW1 and FW2) in two different data centers (DC) that are far apart. In DC1, I use FW1 for IPSec tunnels with my clients.

I want to add some details:

We don't plan to use a FW cluster.
We have only one IP address for the IPSec VPN.
We don't use a DNS A record for this IP.

My question to the community is: Is there a way to set up IPSec High Availability (HA) without a FW cluster and considering these limitations?

I'm looking forward to hearing about your experiences and suggestions.

Thanks in advance!

This thread was automatically locked due to age.

0 Vivek Jagad 3 months ago

Hello Farzan Barouj ,

Thank you for reaching out to the community, If I understood it correctly you want to configure a failover system for the IPsec tunnel in case of failure right ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel