Overview

SonicWall Stateful HA Upgrade for TZ670 SERIES (02-SSC-5889)

General

High Availability requires one SonicWall device configured as the Primary SonicWall, and an identical SonicWall device configured as the Backup SonicWall. During normal operation, the Primary SonicWall is in an Active state and the Backup SonicWall in an Idle state. If the Primary device loses connectivity, the Backup SonicWall transitions to Active mode and assumes the configuration and role of Primary, including the interface IP addresses of the configured interfaces.

After a failover to the Backup appliance, all the pre-existing network connections must be re-established, including the VPN tunnels that must be re-negotiated.The failover applies to loss of functionality or network-layer connectivity on the Primary SonicWall. The failover to the Backup SonicWall occurs when critical services are affected, physical (or logical) link failure is detected on monitored interfaces, or when the Primary SonicWall loses power. The Primary and Backup SonicWall devices are currently only capable of performing Active/Idle High Availability or Active/Active UTM – complete Active/Active high availability is not supported at present.

Benefits
Increased network reliability – In a High Availability configuration, the Backup appliance assumes all network responsibilities when the Primary unit fails, ensuring a reliable connection between the protected network and the Internet
Stream local or remote — the cloud automatically routes the video feed
Virtual MAC for reduced convergence time after failover – The Virtual MAC address setting allows the HA Pair to share the same MAC address, which dramatically reduces convergence time following a failover