Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/index.html?contextId=DisablingHA

Turning off HA

You can turn off HA from either device in the cluster. If you turn off HA from the primary device, it's turned off on both devices. If you turn it off from the auxiliary, HA isn't turned off on the primary, and it acts as a standalone device.

After turning off HA, all the ports except the dedicated HA link port and peer administration port are turned off for the auxiliary device. The peer HA link is assigned the IP address assigned to the dedicated HA link port, while the peer administration IP address is assigned the IP address assigned to the peer administration port.

When you turn off HA, HTTPS and SSH continue to be allowed on the LAN and DMZ zones.

After turning off HA, the primary device IP schema doesn't change.

If HA is turned off from a standalone device, the IP schema doesn't change.