This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM HA on different sites

I am currently running an SG 330 UTM successfully. I have before me another SG 330 which initially I was planning on running in the same datacentre as the original SG 330, with HA configured in active/passive thus avoiding the need to purchase fresh licences. I am happy with the configuration of this.

The spanner in the works is that the customer has just enquired to me about getting the new SG 330 installed in a separate datacentre, albeit one connected to the primary via a fibre link. The main issue I can see with this is that the secondary datacentre is running a different subnet to the primary although it is fully routable. Is there anyway to achieve a HA style config in this scenario ?

Cheers!

This thread was automatically locked due to age.

0 BrucekConvergent over 10 years ago

No. All interfaces on each unit need to be on the same subnets, etc. The HA connection itself would need to be very fast, and very low latency.

HA is intended as a hot spare for a unit in the same datacenter, typically.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 drdavid over 10 years ago

Thanks Brucek appreciate that.

The other option is to run the device as a cold spare, i.e. keep it in the other datacentre but update it manually, perhaps using SUM. Is anyone aware of the licencing requirement for this?

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

I think the only solution is a separate, full license.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago

Or just run the essentials license until you're ready to swap it... load the license and the backup file.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 drdavid over 10 years ago in reply to BarryG

Thank you both for your responses, appreciate it.
Cancel
Vote Up 0 Vote Down

Cancel

UTM HA on different sites

Submitted a Tech Support Case lately from the Support Portal?