Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=firewall-licenses-HA

High availability licensing

Active-passive HA

You must activate the licenses on the device you've configured as the initial primary. The licenses are synchronized with the secondary device.

The initial primary device can be the active or the passive device. The behavior is as follows:

  • Initial primary as the passive device: As long as the initial primary device works as the active or passive device, it synchronizes the licenses with the licensing server, and the HA cluster continues to protect the network.

  • Initial primary isn't working: If the initial primary device isn't working and can't synchronize with the licensing server at least once in 90 days, license protection is deactivated.

    For hardware appliances, only the Base Firewall and Enhanced Support license remain active.

    For virtual and software appliances, the Base Firewall license is also deactivated.

Active-active HA

Both devices carry licenses independently. When either of the devices is working and synchronizes with the licensing server, the HA cluster continues to protect the network.