Sophos XG and Azure Site Recovery

Hello Calyps,

We currenty do not support Site Recovery in Azure. However, we do have an option to configure in High Availability in Azure using Active-Active mode.

Related KBA: https://community.sophos.com/kb/en-us/125612

Related Post https://davidokeyode.wordpress.com/2016/10/05/how-to-deploy-the-sophos-xg-firewall-on-microsoft-azure-using-powershell-imperative-method/

Thanks for the reply Aditya.  Active-Active solution is not required and neither does the client want to pay for another firewall licence and another running instance of the firewall in the DR resource group.  

I would rather work on a scripted firewall deployment in the DR environment and then restore the original firewall backup to this DR firewall.  The next question is then how to move the XG Firewall licence from one Azure XG deployment to a new Azure deployment in case of a disaster. I presume I can first run the DR firewall with an evaluation licence and then redeploy the production licence. 

Any further insights would be appreciated. 

Thanks for the reply Aditya.  Active-Active solution is not required and neither does the client want to pay for another firewall licence and another running instance of the firewall in the DR resource group.  

I would rather work on a scripted firewall deployment in the DR environment and then restore the original firewall backup to this DR firewall.  The next question is then how to move the XG Firewall licence from one Azure XG deployment to a new Azure deployment in case of a disaster. I presume I can first run the DR firewall with an evaluation licence and then redeploy the production licence. 

Any further insights would be appreciated. 

The point is, you can go with a manual process, called License Transfer.

https://community.sophos.com/kb/en-us/126360

But you can only perform this three times!

XG attaches the License / Subscription to the Serialnumber. 

You "could" boot another appliance with the same serial, but most likely this will break the license process. 

Thanks LuCar,  Sounds like the licence transfer process comes from the physical days and needs some updating for the world of cloud. 

At the moment I`m really regretting not just going with Azure Firewall.

Could you give me a bit more information on booting another appliance with the same serial number?

Thanks!