Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=ConfigureAuxiliaryDevice

Configure the auxiliary Sophos Firewall

  1. Go to System services > High availability.

  2. Specify the initial HA device state.

    Set the Initial device role to Auxiliary.

  3. Select Interactive mode.

  4. A passphrase is generated automatically. You can also change it manually.

    Note

    The devices in the cluster must have the same passphrase.

  5. Select a dedicated HA link.

    The peers in an HA cluster continuously monitor the dedicated HA link and the interfaces configured to be monitored.

    Warning

    Don't use Port4 as the dedicated HA link on the following models:

    • XG 105 Rev.3
    • XG 115 Rev.3
    • XG 106

    Note

    The peer device must use the same HA link. Specify this port as the HA link port on the peer. For example, if you choose port E on the primary device, you must also choose port E on the auxiliary device.

    Note

    The IP address of the HA link for the peer device must be on the same subnet.

  6. Click Save.

Configure the primary device. After you have configured the primary device and when HA is active, the devices will synchronize automatically. To force the auxiliary device to pull configuration updates from the primary, click Sync with primary.