Why is the dedicated peer IP HA address in this scenario different from the "peer administration setting" IPv4 address? You said that both of these are the HA address.
Its just weird that you would place the HA interfaces into DMZ zone. Be sure to not to use that zone for your DMZ servers. Anyways it depends on the fw rules obviously if it could be a problem.
Hi Angu, thanks for reaching out! The primary Firewall will initiate a restart. Once done with the upgrade, the Auxillary Firewall will take the role of Primary and vice versa.
If you have further questions, please reach out to us on community.sophos.com!
Why is the dedicated peer IP HA address in this scenario different from the "peer administration setting" IPv4 address? You said that both of these are the HA address.
Its just weird that you would place the HA interfaces into DMZ zone. Be sure to not to use that zone for your DMZ servers. Anyways it depends on the fw rules obviously if it could be a problem.
What will happens if we upgrade the primary firewalls firmware?
Hi Angu, thanks for reaching out! The primary Firewall will initiate a restart. Once done with the upgrade, the Auxillary Firewall will take the role of Primary and vice versa.