Upgrading to v18 causes HA Pair to stop working.

Question

I have recently attempted to update XG230's and XG330's to v18. All my companies firewalls are in an HA cluster. The update breaks the cluster causing one of the units to be unreachable and unavailable for the HA Pairing. 
 Do I need to unpair the HA cluster and perform the updates separately? I have had it fail 3 times on separate pairs. Not a good track record.

LuCar Toni · Answer

Coming from V17.5, both appliances will reboot simultaneously. 
 Coming from V18.0, it should move one by another. 
 See: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/haStartupGuide/concepts/HAFirmwareUpgrade.html 
 
 How long was the uptime of those clusters? 
 I always recommend to perform a takeover (Reboot both appliances) to check, if both appliances actually come back up after a reboot process.

Upgrading to v18 causes HA Pair to stop working.

Top Replies