I have a set of SG210 running UTM 9.510-5 firmware with active subscription.
Recently 1 of the SG210 had problem and we RMA the unit, a replacement unit was sent to us, but with a higher firmware version (9.705). I checked the Sophos UTM download page and seems UTM 9.510-5 is no longer available for download any more.
May I know what is the correct procedure to join the replacement unit back to the HA cluster?
1. Backup config file from existing working SG2102. Go to MyUTM, license for the old faulty unit and change the serial number to the new unit3. Go to High Availability setting in the existing working SG210 and change the operation mode to Off4. Upgrade existing SG210 to same firmware as the replacement unit (downtime expected)5. Connect the HA ports for both units6. Configure HA setting at existing unit7. Connect the WAN and LAN port of replacement unit
Is the above steps correct?
Was thinking of doing the following steps:
1. Load UTM 9.510-5 to replacement unit (sent email to Sophos support to request for ISO)2. Backup config from working unit and load to replacement …
You won't have to change the serial in myutm because your license is normally included in the backup.
First of all I would advise you to check if the replacement unit has the same hardware revision like the one in production. Currently we are getting sometimes RMA devices for HA clusters where the hardware revision does not match. Therefore check this here (Sophos Firewall, UTM, AP, RED: Find the revision number)
There would be another option to bring your cluster back to production, but with the risk, that you have to upgrade the running one first:
Another option would be:
1. import the backup to the new/replacement device // check configuration within new device
2. power up and change cables from old running to new device
3. upgrade old device and rebuild cluster
Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum PartnerSophos Solution Partner since 2003 If a post solves your question, click the 'Verify Answer' link at this post.