Sophos Firewall

Discussions HA monitoring through SNMP

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 1 reply
Subscribers 27 subscribers
Views 2556 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HA monitoring through SNMP

bram coomans over 6 years ago

Hi everybody,

First of all thanks for reading this post and i hope you can maybe help me.

We have 2 sophos XG firewalls in active passive. Active one is in Datacenter A(Main datacenter) the passive in datacenter B

Now lets say for some reason the firewall fails over and datacenter B becomes active.

if only the firewall fails over and not the whole environement i got a suboptimal dataflow path afterwards.

Data will flow from datacenterA to the firewall in datacenter B and back.

So is there anyway to monitor what firewall is the active one? Like checking on serial number?

Thx in advance!

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 6 years ago
"if only the firewall fails over and not the whole environement i got a suboptimal dataflow path afterwards."

I do not like this to happen at all. But other topic.

I think, the MiB has no indicator for the current master.

https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/Other-documents/SOPHOS-MIB.txt

You could try to get the SNMP information out of the HA Aux appliance. HA Aux Appliance is still reachable in HA via Administration HA IP.

There is something in Mib:

aMode OBJECT-TYPE SYNTAX HaModeType MAX-ACCESS read-only STATUS current DESCRIPTION " " ::= { sysStatus 5 }
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 6 years ago
"if only the firewall fails over and not the whole environement i got a suboptimal dataflow path afterwards."

I do not like this to happen at all. But other topic.

I think, the MiB has no indicator for the current master.

https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/Other-documents/SOPHOS-MIB.txt

You could try to get the SNMP information out of the HA Aux appliance. HA Aux Appliance is still reachable in HA via Administration HA IP.

There is something in Mib:

aMode OBJECT-TYPE SYNTAX HaModeType MAX-ACCESS read-only STATUS current DESCRIPTION " " ::= { sysStatus 5 }
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data