Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=HAConfiguration

Basic HA configuration

You can set up Sophos Firewall as an active-active or active-passive HA cluster using QuickHA or interactive configuration modes.

The HA cluster types are as follows:

  • Active-active: The primary and auxiliary devices both process traffic. The primary device uses load-balancing methods to distribute the traffic between the two devices equally.

    Use this HA cluster type if your priority is increased throughput with some network resilience.

  • Active-passive: The primary device processes all traffic. The auxiliary device remains on standby until the primary device fails. After the primary device fails, the auxiliary device becomes the new primary device and starts processing all traffic.

    Use this HA cluster type if your priority is optimum network resilience.

Video: How to configure HA

See the video Part 2: HA configuration.

For the video Part 1: HA configuration, see Hardware and software requirements.

Before deployment

During deployment