Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=LoadBalancingSupport

Load-balancing support

In Active–Active mode, the primary device receives all network traffic and allocates traffic to the auxiliary in a process known as load-balancing. Load-balancing support varies according to traffic type.

Traffic type Supported?
Normal forwarded TCP traffic Y
NATed (both SNAT and virtual host) forwarded TCP traffic Y
TCP traffic passing through proxy subsystem: transparent proxy, direct proxy, parent proxy and VLAN traffic Y
Route mode, bridge mode, mixed mode, and multiport bridge mode traffic: TCP traffic passing through the proxy subsystem (transparent/direct/parent); forwarded TCP traffic; NATed (SNAT and virtual host) forwarded TCP traffic; HTTPS connection; VLAN traffic Y
VPN N
UDP N
ICMP N
Multicast sessions N
Broadcast sessions N
Scanned FTP N
Traffic coming through RED devices and access points N
TCP traffic for the user portal, the web admin console or Telnet console N
H323 traffic sessions N
Control traffic for all modules N
Route mode, bridge mode, mixed mode, and multiport bridge mode traffic: VPN sessions, traffic other than TCP (UDP, ICMP, multicast, broadcast, etc.); system-generated traffic; scanned FTP traffic; traffic coming through wireless RED devices and access points; TCP traffic for the user portal, the web admin console or the CLI; H323 traffic sessions; control traffic for all modules N