Running asg120 version 8 in ha active-passive...It's pretty slow.
Technically it should work to switch to active-active and back if one box fails!? But what about the license?
ok. or to switch to a new revision ...I'm on rev.2 I think.
I guess I tuned a lot, the next step would be to disable essential daemons like IPS, etc. ;-)
In regard to your first post in this thread, I'm a little confused. In fact, when running in Active-Passive (Hot-Standby), if the Active node fails, there is a virtually-instantaneous failover to the second node. If the first node comes back up, it becomes the passive node - the second node will continue as the Active node.
You can test this behavior by powering the first node down. I think the only problems are the dropping of VoIP calls and the interruption of any up/downloads. All other things should not even notice the switch.
If you have other questions not concerning this issue, please open a new thread.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
A new 120, iirc, has an Atom CPU, which is faster than the older VIA, but, depending on your bandwidth, may still be strained by the IPS and other services such as antivirus.
now I'm confused because you're confused ;-)
How the ha modes works if something goes wrong I know....The license was my main question, which has barryG solved.
Hi, esmirQ, and welcome to the User BB!
In regard to your first post in this thread, I'm a little confused. In fact, when running in Active-Passive (Hot-Standby), if the Active node fails, there is a virtually-instantaneous failover to the second node. If the first node comes back up, it becomes the passive node - the second node will continue as the Active node.
You can test this behavior by powering the first node down. I think the only problems are the dropping of VoIP calls and the interruption of any up/downloads. All other things should not even notice the switch.
If you have other questions not concerning this issue, please open a new thread.
Hmm - I may switch to a soft - solution with a fancy hardware.
Cheers.
A new 120, iirc, has an Atom CPU, which is faster than the older VIA, but, depending on your bandwidth, may still be strained IPS and other services such as antivirus.
Hmm - I may switch to a soft - solution with a fancy hardware.
Your reseller should be able to look at your configuration and reporting to make a recommendation. In general, the subscription cost for a 120 is about the same as for 25-IP software, and that for a 220 is about the same as for 100-IP software.
Generally, the appliances offer the most cost-effective solution for organizations with light or medium usage. Sometimes, a 50-IP software license makes more sense than a 220 appliance, and a 100-IP license sometimes makes more sense than a 320 appliance (subscriptions cost about the same for 250-IP software). I have customers with both solutions.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
