Upon successful creation of your Auto Scale UTM Stack, there will be three UTMs shown in your EC2 Instances section:
- One Sophos UTM instance labeled “Queen”
- Two Sophos UTM instances labeled “Worker”
The solution is designed so that all configuration and management is done via the Queen UTM, which then stores all configuration settings in S3 and gathers all logging information via the syslog protocol.
The Queen Elastic IP used for management should match the Sophos UTM public IP address shown in the CloudFormation Outputs section. Sophos UTM instance creation will typically lag the CloudFormation creation and the EIP may not be attached to the Queen UTM until the instance is fully launched and ready.
Note – Each UTM worker has a public IP and this can be used to connect to that UTM. Any changes made on worker UTMs will be overwritten by the Queen configuration, and will not be synchronized to other workers.