Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 28 subscribers
  • Views 1820 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Data loss in HA mode when primary device is switched?

Jelle

Hello,

 

it seems to me that logged data is lost when we switch the device in HA mode. Quarantined mails are not available and reports are also empty or at least not complete.

Is this expected behaviour with HA?



This thread was automatically locked due to age.
Parents
  • +1

    Hello Jelle,

    The reports and quarantine mail is only stored on the primary appliance and when it is switched then that data does not transfer to the new primary and being in the secondary appliance.

    I would recommend using Iview to store to an external disk. You can only release the and view the quarantine from the primary device and if the emails are stored from the previous primary device.

    You may try to disable HA to access the auxiliary device user portal and release the email.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • 0 in reply to Aditya Patel

    Hello Aditya,

     

    so if we switch to the auxiliary device it is recommended to switch back as soon as possible if possible. Thanks for clarification.

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

Reply
  • 0 in reply to Aditya Patel

    Hello Aditya,

     

    so if we switch to the auxiliary device it is recommended to switch back as soon as possible if possible. Thanks for clarification.

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

Children
  • +1 in reply to Jelle

    It is documented in this HA KBA.

    https://community.sophos.com/kb/en-us/123174

    • In Active-Passive mode, mail will be only be quarantined on the Primary Device.
    • If Quarantine Digest is configured, both devices in the cluster will send Quarantine Digest.
    • Administrators can release quarantined mail of any and all users from both devices.
    • Users can release quarantined mail from the User Portal. The User Portal only displays mail quarantined on the Primary Device. Users can also release them from the Quarantine Digest mailed from the Primary Device.

    __________________________________________________________________________________________________________________

Cookie Information Banner