Guest User!

You are not Sophos Staff.

Thread Info
  • Locked Locked
  • Replies 4 replies
  • Subscribers 27 subscribers
  • Views 12196 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active / Backup gateway status

Slawski

I have defined WWAN backup gateway (it is set as backup in System > Network > WAN Link Manager).

It is reported as down when not in use and that's fine but why connection status on the dashboard is reported as "Warning" (orange color) when the primary gateway is up and secondary gateway (3G Modem) has been brought down by SFOS ???

It should set warning state only if Active gateway goes down, right ?



This thread was automatically locked due to age.
Parents

  • Generally, in SFOS when a WAN gateway is set as Backup it does not mean that we cannot pass any traffic until the primary is down. You can still create firewall policies outbound to the backup gateway creating a policy based routing. Example any traffic going to my Data Centers for backups should use the Backup gateway so it would not interfere with the traffic on my active. Another use case would be VPN I can still have all my remote offices terminate Site to Site VPN on my secondary gateway. So it's important to show it on the dashboard.

    in WWAN case they will most probably remain idle because they often have limited Capping from the ISP in terms of Data. So your request would be valid for only WWAN there needs to be a change in dashboard notifications just for WWAN.

Reply

  • Generally, in SFOS when a WAN gateway is set as Backup it does not mean that we cannot pass any traffic until the primary is down. You can still create firewall policies outbound to the backup gateway creating a policy based routing. Example any traffic going to my Data Centers for backups should use the Backup gateway so it would not interfere with the traffic on my active. Another use case would be VPN I can still have all my remote offices terminate Site to Site VPN on my secondary gateway. So it's important to show it on the dashboard.

    in WWAN case they will most probably remain idle because they often have limited Capping from the ISP in terms of Data. So your request would be valid for only WWAN there needs to be a change in dashboard notifications just for WWAN.

Children