This allows the Backup unit to synchronize with the SonicWALL license server and share licenses with the associated Primary appliance. well, you know the rest by now. High Availability provides the following benefits: Increased network reliability In a High Availability configuration, the Backup appliance assumes all network responsibilities when the Primary unit fails, ensuring a reliable connection between the protected network and the Internet. Disabling PortShield with the PortShield Wizard, Synchronizing Settings and Verifying Connectivity. Hardware Failover License Synchronization. If you add a new service license, the keyset is updated. To back up the firmware and settings when you upgrade, check. The previous installation of virtual firewall was not properly removed.Customer's can de-register it in two ways: Delete and Register the product in MYSonicWall account (Similar to De-register). To make this appliance a Primary unit, click Continue without clicking a radio button. To associate two already-registered SonicWALL security appliances so that they can use High Availability license synchronization, perform the following steps: . See Applying Licenses to SonicWALL Security Appliances for both procedures. Thanks for your swift reply. In the Ports Assignmentscreen, select WAN/LAN/HA, and then click Next. NoteWhen HA Monitoring/Management IP addresses are configured only on WAN interfaces, they need to be configured on all the WAN interfaces for which a Virtual IP address has been configured. NoteIf you are connecting the Primary and Backup appliances to an Ethernet switch that uses the spanning tree protocol, be aware that it may be necessary to adjust the link activation time on the switch port to which the SonicWALL interfaces connect. On the main page under Most Recently Registered Products, click View all registered products. This is the license keyset for the appliance that you selected earlier. The Network> PortShield Groups page displays the interfaces as unassigned. Register a new appliance, and then choose an already-registered unit to associate it with. Stateful High Availability is not load-balancing. Note that you can also change the associated product (parent) for this child on this page. Simply identify the specific SonicWall in question by friendly name, product type, etc, and look at the serial number column. Both appliances must be the same SonicWALL model. If you receive this error, the serial number will need to be cleared before it can be registered to a new account. When Stateful High Availability is enabled, the Primary appliance actively communicates with the Backup to update most network connection information. You do not need to purchase a second set of licenses for the Backup unit in a High Availability Pair. If you contact SonicWALL Technical Support to arrange the replacement (known as an RMA), Support will often take care of this for you. After the appliances are associated as an HA Pair, they can share licenses. The following tableshows which interface to use for the various SonicWALL security appliance platforms. When the Stateful High Availability Upgrade is licensed, the Backup unit is always synchronized so that there is no interruption to existing network connections if the Primary unit fails. For information on license synchronization, see High Availability License Synchronization Overviewand Applying Licenses to SonicWALL Security Appliances. In the event of the failure of the Primary SonicWALL, the Backup SonicWALL takes over to secure a reliable connection between the protected network and the Internet. This may happen if the product was purchased used or gifted by another user. The Idle identifier is a logical role that can be assumed by either a Primary or Backup hardware unit. The WAN (X1) interfaces are connected to another switch, which connects to the Internet. High Availability allows two identical SonicWALL security appliances running SonicOS Enhanced to be configured to provide a reliable, continuous connection to the public Internet.One SonicWALL device is configured as the Primary unit, and an identical SonicWALL device is configured as the Backup unit. Verify that your product registered successfully and verify the correct appliance and serial number for the parent (or child, if you chose that option). On the Service Management - Associated Products page, scroll down to the Parent Product section, just above the Associated Products section. Register the replacement appliance and create an HF association with the original HF primary, using the replacement unit as the HF secondary. You can use the SonicOS user interface (UI) to enable hardware failover and configure the two appliances in active/passive mode. This section describes two methods of applying the licenses to a SonicWall security appliance. The WAN virtual IP address and interfaces must use static IP addresses. The synchronization traffic is throttled to ensure that it does not interfere with regular network traffic. To remove the association between two registered SonicWALL security appliances, perform the following steps: In the left navigation bar, click My Products. Clear the Backup SonicWALL Serial Number text box. To associate two already-registered SonicWALL security appliances so that they can use High Availability license synchronization, perform the following steps: . In case of a failover, the following sequence of events occurs: A PC user connects to the network, and the Primary SonicWALL security appliance creates a session for the user. Use one of the procedures below to apply a license keyset to an appliance. Make sure that the two appliances are running the same SonicOS Enhanced versions. You need to enter this number in the High Availability > Settingspage. The My Products page is shown with the serial number entered above already populated into the appropriate field in the Add New Product section. You can click HA Secondaryto display the My Product - Associated Products page for the child/secondary/Backup unit. Active/Active UTM requires Stateful High Availability and is supported on SonicWALL E-Class NSA appliances. This section contains the following subsections: What is High Availability License Synchronization? This can be done by logging into MySonicWall.com from the SonicWall's Management Interface: Registering Your SonicWall Internet Security ApplianceRegistering from the Management InterfaceSerial NumberAuthentication Code, Registering from the Management Interface. Follow these steps to view the license keyset on MySonicWall.com and copy it to the appliance: Activating Licenses from the SonicOS User Interface. When failover occurs, the secondary appliance is licensed and ready to take over network security operations. The only licenses that are not shareable are for consulting services, such as the SonicWALL GMS Preventive Maintenance Service. Lasso Logic branded units ship with a 6- to 8-digit serial number on the side of the unit. WarningSonicWALL High Availability does not support dynamic IP address assignment from your ISP. This eliminates the possibility of configuration errors and ensures the uniqueness of the Virtual MAC address, which prevents possible conflicts. Qualification of failure is achieved by various configurable physical and logical monitoring facilities described throughout the Task List section. Click the product nameor serial number. When using SonicWALL Global Management System (GMS) to manage the appliances, GMS logs into the shared WAN IP address. You can unsubscribe at any time from the Preference Center. Both can be found in these locations: Register After you register your appliances on the MySonicWall.com site, you must update your SonicWallSonicWall appliance with the registration information. If you type the incorrect serial number into the Serial Number field, a message stating that the appliance is previously registered may be returned. Registering Your SonicWall Internet Security Appliance - Registering at MySonicWall.com. There is a weighting mechanism on both sides to decide which side has better connectivity, used to avoid potential failover looping. On the My Products page, under Add New Product, type the friendly name for the appliance and the authentication code into the appropriate text boxes, and then click Register. Before configuring Active/Active UTM, you must configure two SonicWALL security appliances as a Stateful High Availability pair and enable Stateful Synchronization in the SonicOS management interface. my main purpurse is enabling vpn connection to my home network from remote place, to achive this goal should i need to purches additional licence ? To use this feature, you must register the SonicWall appliances on MySonicWall.com as associated products. To replace an HA Secondary unit, perform the following steps: On MySonicWALL, remove the old HA association. The self-checking mechanism is managed by software diagnostics, which check the complete system integrity of the SonicWALL device. All clients and remote sites continue to use the same Virtual MAC address and IP address without interruption. In this case, you need to remove the HA association containing the failed appliance in MySonicWALL, and add a new HA association that includes the replacement. Under Associated Products, click HA Secondary. TIP: If you have a large number of products, you can sort them . Under normal operating conditions, the Backup unit operates in an Idle mode. . Click the product nameor serial number. The High Availability feature has a thorough self-diagnostic mechanism for both the Primary and Backup SonicWALL security appliances. This requires that you have an additional routable IP address available. Serial at Max Registration. All security services you see on the Security Services > Summaryscreen are shareable, including Free Trial services. The self-checking mechanism is managed by software diagnostics, which check the complete system integrity of the SonicWALL device. Cost-effectiveness High Availability is a cost-effective option for deployments that provide high availability by using redundant SonicWALL security appliances. so, is there any way to re register the product under my name? that reseller also doest know the details of registerd user. The serial number for the Primary SonicWALL is automatically populated. Decide which interface to use for the additional connection between the appliances. Replacing a failed HF primary unit is slightly different than replacing a secondary one. On SonicWALL appliances that support the PortShield feature (SonicWALL TZ series and NSA 240), High Availability can only be enabled if PortShield is disabled on all interfaces of both the Primary and Backup appliances. You can find the serial number on the back of the SonicWALL security appliance, or in the System > Statusscreen of the Backup unit. Select a registered unit and thenadd a new appliance with which to associate it. Replacing a failed HA Primary unit is slightly different than replacing an HA Secondary unit. Optionally, you can manually configure the Virtual MAC address on the High Availability > Monitoring page. In the PortShield Wizard Completescreen, click Close. To use the Active/Active UTM feature, the administrator must configure an additional interface as the HA Data Interface. As the Primary creates and updates connection cache entries or VPN tunnels, the Backup unit is informed of such changes. Your network environment must meet the following prerequisites before configuring Stateful High Availability or non-stateful High Availability: The Primary and Backup appliances must be the same model. When Internet access is restricted, you can manually apply the shared licenses to both appliances. The Primary and Backup SonicWALL security appliances must have a dedicated connection between each other for High Availability. Follow these steps to activate licenses from within the SonicOS user interface: My ProductsManaging Your SonicWall RegistrationsActivating Your SonicWall/Aventail Appliance LicenseService ManagementActivating Security Services from the SonicWall Management Interface, Activating Your SonicWall/Aventail Appliance License, Activating Security Services from the SonicWall Management Interface. Its serial number is automatically displayed in the Primary SonicWALL Serial Number text box. As the Primary appliance creates and updates network connection information (VPN tunnels, active users, connection cache entries, etc. The number for the primary SonicWall is automatically populated. To use this method, perform the following steps: On the My Products page, under Registered Products, scroll down to find the appliance that you want to use as the existing unit. To sign in, use your existing MySonicWall account. Stateful High Availability provides the following benefits: Improved reliability- By synchronizing most critical network connection information, Stateful High Availability prevents down time and dropped connections in case of appliance failure. If the existing unit is an HA Secondary appliance, click HA Primary. High Availability provides a way to share SonicWALL licenses between two SonicWALL security appliances when one is acting as a high availability system for the other. In MySonicWall Web page (Serial Number) Click Product Management. It just so happens that I have a stack of SonicWALLs to configure and as I'm going through and documenting the hardware. This section provides an introduction to the Stateful High Availability feature. However, until you apply the licenses to the appliance, it cannot perform the licensed services. Connect the Primary SonicWALL and Backup SonicWALL appliances with a CAT5 or CAT6-rated crossover cable. These licenses are synchronized between the Active and Idle appliances in the same way that all other information is synchronized between the two appliances. The Backup appliance begins to send gratuitous ARP messages to the LAN and WAN switches using the same Virtual MAC address and IP address as the Primary appliance. Without Virtual MAC enabled, the Active and Idle appliances each have their own MAC addresses. MySonicWall.com - Help. Note that the Backup appliance of your High Availability Pair is referred to as the HA Secondary unit on MySonicWALL. If you will not be using Primary/Backup WAN Management IP address, make sure each entry field is set to 0.0.0.0 (in the High Availability > Monitoring Page). Stateful High Availability is supported on SonicWALL NSA appliances, but not on SonicWALL TZ series appliances. Its serial number is automatically displayed in the Primary SonicWALL Serial Number text box. The Status page of your SonicWall management interface. With Stateful High Availability the Primary unit actively communicates with the Backup on a per connection and VPN level. Under Parent Product, to remove the association for this appliance, click Remove, wait for the page to reload, scroll down, and then click Remove again. On the back of the Backup SonicWALL security appliance, locate the serial number and write the number down. Use your mouse to highlight all the characters in the text box. Convergence time is the amount of time it takes for the devices in a network to adapt their routing tables to the changes introduced by high availability. 2. In the Welcomescreen, select PortShield Interface Wizard, and then click Next. It is not supported in any version of SonicOS Standard. It contains the following sections: High Availability License Synchronization Overview, Stateful and Non-Stateful High Availability Prerequisites, Associating Appliances on MySonicWALL for High Availability, Applying Licenses to SonicWALL Security Appliances, Verifying Active/Active UTM Configuration. If your product has an authentication code, type this into the, If your SonicWall registration requires an authentication code, enter the code in the. High availability license synchronization allows sharing of the SonicOS Enhanced license, the Support subscription, and the security services licenses present on the Primary SonicWALL appliance with the associated Backup appliance. The label on the bottom of your SonicWall appliance. Accessing the management interface with this IP address will log you into the appliance that is Active whether it is the Primary unit or Backup unit. You can associate a SonicWALL security appliance with another appliance of the same model when you first register it, or at any time after both appliances are already registered on MySonicWALL. Critical internal system processes such as NAT, VPN, and DHCP (among others) are checked in real time. On MySonicWALL, register the replacement Sonicwall security appliance and create an HA association with the new Primary (original Backup) unit as the HA Primary, and the replacement unit as the HA Secondary. When you enter a serial number the device can no longer have warranty or security services registered to it. By default, this Virtual MAC address is provided by the SonicWALL firmware and is different from the physical MAC address of either the Primary or Backup appliances. You can associate two SonicWALL security appliances as HA Primary and HA Secondary on MySonicWALL. MySonicWall.com provides several methods of associating the two appliances: You can remove an appliance from an association at any time. Associating an Appliance at First Registration. Perform the procedure for each of the appliances while logged into its individual management IP address. Its serial number is automatically displayed in the Primary SonicWALL Serial Number text box. Processing of all modules other than DPI UTM services is restricted to the active unit. On the Create Association page, if multiple qualifying existing appliances are displayed, click the radio button to select the unit with which you want to associate the new unit. Because the appliances are using the same IP address, when a failover occurs, it breaks the mapping between the IP address and MAC address in the ARP cache of all clients and network resources. MySonicWALL provides several methods of associating the two appliances. To create a free MySonicWall account click "Register". Type the serial number for the replacement unit into the Backup SonicWALL Serial Number . I would like to attaching my router to my new netgear account but it looks like already registered. Idle- Describes the passive condition of a hardware unit. Hardware failover license synchronization is a cost-effective option for deployments that provide high availability by using redundant SonicWall security appliances. If your support service has already expired and you purchase a 1 Year subscription, this will mean that the term is reduced because the new subscription is back-dated and . The designated high availability interfaces are connected directly to each other using a crossover cable. Primary - Describes the principal hardware unit itself. Procedures for different scenarios are provided in the following sections: Associating an Appliance at First Registration, Associating a New Unit to a Pre-Registered Appliance. The failover to the Backup SonicWALL occurs when critical services are affected, physical (or logical) link failure is detected on monitored interfaces, or when the Primary SonicWALL loses power. You can then create a Friendly Name for the appliance. License synchronization is used so that the Backup appliance can maintain the same level of network protection provided before the failover. On the next screen, you can verify that your product registered successfully and, at the bottom under Parent Product, verify the correct appliance and serial number for the parent (or child, if you chose that option). The screen displays only units that are not already Backup units for other appliances. Stateful High Availability (SHA) provides dramatically improved failover performance. The Primary appliance synchronizes with the Backup appliance. See Replacing a SonicWALL Security Appliance. Regards. Before You Register i there any place where i can learn about sonic wall firewall? Upon failover, layer 2 broadcasts are issued (ARP) to inform the network that the IP addresses are now owned by the Backup unit. For example, on a Cisco Catalyst-series switch, it is necessary to activate spanning tree port fastfor each port connecting to the SonicWALL security appliances interfaces. If the timestamps are out of sync and the Idle unit is available, a complete synchronization is pushed to the Idle unit. Thank you for visiting SonicWall Community. DPI UTM is processed on the idle unit and then the results are returned to the active unit over the same interface. No routing updates are necessary for downstream or upstream network devices. Primary WAN Management IP Address (Optional) - Configured under High Availability > Monitoring. Hardware failover license synchronization is currently available when running SonicOS Enhanced on the following SonicWall security appliances: Configure hardware failover license synchronization by associating two SonicWall security appliances as HF primary and HF secondary on MySonicWall.com. Adjust time or heartbeat settings in the four text boxes. See Verifying High Availability Statusfor a description of the fields listed in the High Availability Status table. How Does Stateful High Availability Work? All pre-existing network connections must be rebuilt. Configuring routers is not something I do every day. Registration of your product can be done on the My Products page: After you register a SonicWall product, you can view the product registration summary in the Registered Products section of the My Products page. In an active/active model, both firewalls share the processing. This requires that you have an additional routable IP address available. This step is required when the HF primary unit has failed, because the licenses are linked to the primary unit in an HF pair. License synchronization is used in a high availability deployment so that the Backup appliance can maintain the same level of network protection provided before the failover. This chapter describes how to configure and manage the High Availability feature on SonicWALL security appliances. Two appliances configured in this way are also known as a high availability (HA) pair. I'll give myself a little slack. Log into the management interface of the other appliance in the HA Pair and repeat this procedure. To register a new SonicWall appliance and associate it as a secondary unit to an existing primary unit for failover license synchronization, perform the following steps: To associate two already-registered SonicWall security appliances so that they can use license synchronization, perform the following steps: Associating a New Unit to a Pre-Registered Appliance. Quick Register The Virtual MAC address greatly simplifies this process by using the same MAC address for both the Primary and Backup appliances. If one appliance is available as the parent product (Primary unit), click the radio button to select it, and then click Continue. They kept sending me proposals for the TZ300 3-Year CGSS UP. The Idle unit assumes the Active role in the event of determinable failure of the Active unit. Or, you can start the process by selecting a registered unit and adding a new appliance with which to associate it. After configuring Stateful High Availability on the appliances in the HA pair, connecting and configuring the HA data interface is the only additional configuration required to enable Active/Active UTM. Then a window with the list of your registered appliances will show up. See Associating an Appliance at First Registration. Convergence time is the amount of time it takes for the devices in a network to adapt their routing tables to the changes introduced by high availability. Minimal impact on bandwidth- Transmission of synchronization data is throttled so as not interfere with other data. If using only a single WAN IP, note that the Backup device, when in Idle mode, will not be able to use NTP to synchronize its internal clock. All settings will be synchronized to the Idle unit, and the Idle unit will reboot. On the Product Survey page, optionally fill in the requested information and then click Continue. A basic configuration procedure is provided below. invoice), they will transfer the device to your account. This field is for validation purposes and should be left unchanged. This is optional, as you can always manage the Active unit with one static WAN IP address. Please submit a ticket to our . It is strongly recommended that the Primary and Backup appliances run the same version of SonicOS Enhanced firmware; system instability may result if firmware versions are out of sync, and all High Availability features may not function completely. Using a standard Ethernet cable, connect the two interfaces directly to each other. 1, 2 or 3 Years.. NoteYou can remove an appliance from an association at any time. During normal operation, the Primary SonicWALL is in an Active state and the Backup SonicWALL in an Idle state. Backup LAN Management IP Address- Configured under High Availability > Monitoring. Upon failure of the Primary unit, the Backup unit will assume the Active role. If the Primary device loses connectivity, the Backup SonicWALL transitions to Active mode and assumes the configuration and role of Primary, including the interface IP addresses of the configured interfaces. Register and associate the Primary and Backup SonicWALL security appliances as a High Availability pair on MySonicWALL. Or, you might need to switch the HA Primary appliance with the Backup, or HA Secondary, unit after a network reconfiguration. If you selected an existing HA Primary unit or unassociated unit in Step 3, the choices here will all be HA Primary. A photograph of the product label that includes a readable view of the serial number (this helps . The benefits of the Active/Active UTM feature include the following: Both the firewalls in the HA pair are utilized to derive maximum throughput, GAV, IPS, Anti-Spyware, and Application Firewall services are the most processor intensive, and concurrent processing of these services on the idle firewall while the active firewall performs other processing provides the most throughput gain. The failover applies to loss of functionality or network-layer connectivity on the Primary SonicWALL. Click the Select All link at the top of the page. A security ecosystem to harness the power of the cloud, Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions, Access to deal registration, MDF, sales and marketing tools, training and more, Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials, 03/26/2020 17 People found this article helpful 185,409 Views. To configure hardware failover in SonicOS: Applying Licenses to SonicWall Security Appliances. Sometimes registration gets error: This serial number is already used with another installation (E1004). The Backup unit does not receive heartbeat messages from the Primary appliance and switches from Idle to Active mode. For complete information about setting up hardware failover, including details about ports and IP address requirements, see the SonicOS Enhanced Administrators Guide for version 3.2 or later. The Backup SonicWALL maintains a real-time mirrored configuration of the Primary SonicWALL via an Ethernet link between the designated HA ports of the appliances. To enable failover, use the SonicOS UI to configure your two appliances as an HA pair in active/passive mode. The diagnostics check internal system status, system process status, and network connectivity. Both units must be registered and associated as a High Availability pair on MySonicWALL before physically connecting them. In either case, you must first remove the existing HA association and then create a new association that uses a new appliance or changes the parent-child relationship of the two units. If you have any of them laying around, or even if you already tossed one but still have the serial number, than can be your qualifier. Mixing and matching SonicWALLs of different hardware types is not currently supported. If you contact SonicWall Technical Support to arrange the replacement (known as an RMA), Support will often take care of this for you. This section describes how to add a new appliance on the My Product - Associated Products page to an already-registered SonicWall security appliance, and associate the two appliances so that they can use license synchronization. This section describes how to associate two SonicWALL appliances as a High Availability Pair on mysonicwall.com, and shows an example high availability configuration on SonicOS Enhanced. For example, continuing the example shown above, you would see the following: You can remove the association between two SonicWALL security appliances on MySonicWALL at any time. The LAN (X0) interfaces are connected to a switch on the LAN network. Click the "Register" link; the MySonicWall.com Login page is displayed. In the SonicOS Enhanced management interface, navigate to the Network > Interfaces page and ensure that the Zoneis Unassigned for the intended HA Data Interface. I have already read those steps, but as I commented above everytime I try to register my product with the serial number given I get a mesage which tells me that my serial number is already registered. On MySonicWALL, remove the old HA association.See Removing an HA Association. The Primary identifier is a manual designation, and is not subject to conditional changes. Click View all registered products. Lightbulb moment. Synchronization provides a way to share SonicWall security services licenses between two appliances when one is acting as a hardware failover system for the other. The Backup unit remains in a continuously synchronized state so that it can seamlessly assume the network responsibilities upon failure of the Primary unit with no interruption to existing network connections. On the My Product - Associated Products page, in the text boxes under Associate New Products, type the serial numberand the friendly nameof the new appliance that you want to register as the associated unit. This is the IP address used for managing the Backup unit over the WAN interface, regardless of the Active or Idle status of the unit. On the main page, under Quick Register, type the appliance serial number and then press, Select a choice for HF secondary, and then click. Until this ARP request propagates through the network, traffic intended for the Primary appliances MAC address can be lost. The Virtual MAC setting is available even if Stateful High Availability is not licensed. The units are connected with their designated HA ports. 2. High Availability pairs share a single set of security services licenses and a single Stateful HA license. The Primary and Backup appliances are continuously synchronized so that the Backup can seamlessly assume all network responsibilities if the Primary appliance fails, with no interruptions to existing network connections. License synchronization is used during hardware failover so that the secondary appliance can maintain the same level of network protection provided before the failover. Certain packet flows on the active unit are selected and offloaded to the idle unit on the HA data interface. If your SonicWALL security appliance has a hardware failure while still under warranty, SonicWALL will replace it. This section provides an introduction to the Active/Active UTM feature. The diagnostics check internal system status, system process status, and network connectivity. As a first step towards complete Active/Active High Availability, Deep Packet Inspection (DPI) UTM services are migrated to an Active/Active model, referred to as Active/Active UTM. Next-generation firewall for SMB, Enterprise, and Government, Comprehensive security for your network security solution, Modern Security Management for todays security landscape, Advanced Threat Protection for modern threat landscape, High-speed network switching for business connectivity, Protect against todays advanced email threats, Next-generation firewall capabilities in the cloud, Stop advanced threats and rollback the damage caused by malware, Control access to unwanted and unsecure web content, How can I Register a Product in mysonicwall, SSLVPN Timeout not working - NetBios keeps session open, Configuring a Virtual Access Point (VAP) Profile for Internal Wireless Corporate Users, How to hide SSID of Access Points Managed by firewall. To manually disable PortShield on each SonicWALL, perform the following steps: On one appliance of the planned HA Pair, navigate to the Network> PortShield Groups page. Normally though you'd buy from a reputable seller who can transfer the device to you. Select My Products. By default, the Virtual MAC address is provided by the SonicWALL firmware and is different from the physical MAC address of either the Primary or Backup appliances. High Availability is only supported on the SonicWALL security appliances running SonicOS Enhanced. NoteEven if you first register your appliances on MySonicWALL, you must individually register both the Primary and the Backup appliances from the SonicOS management interface while logged into the individual management IP address of each appliance. In case of a failover, GMS administration continues seamlessly, and GMS administrators currently logged into the appliance will not be logged out, however Getand Post commands may result in a timeout with no reply returned. This is the IP address used for managing the Backup unit over the LAN interface, regardless of the Active or Idle status of the unit. . Associate two units that are both already registered. There are two types of synchronization for all configuration settings: incremental and complete. If the timestamps are in sync and a change is made on the Active unit, an incremental synchronization is pushed to the Idle unit. This means simply that the serial number has already been registered to a different account. The previous installation of virtual firewall was not properly removed.Customer's can de-register it in two ways: De-Register from Firewall GUI For SonicWALL appliances that support PortShield, High Availability requires that PortShield is disabled on all interfaces of both the Primary and Backup appliances prior to configuring the HA Pair. Copying the License Keyset from MySonicWall.com. LAN Virtual IP Address- Configured on the X0 interface of the Primary unit. The license is shared with the Backup unit. The Backup appliance must issue an ARP request, announcing the new MAC address/IP address pair. On the Create Association Page, click the radio button for the SonicWALL appliance that you want to act as the parent, or Primary, unit in the High Availability pair. The following DPI UTM services are affected: When Active/Active UTM is enabled on a Stateful HA pair, these DPI UTM services can be processed concurrently with firewall, NAT, and other modules on both the active and idle firewalls. You need only purchase a single set of licenses for the HA Primary appliance. Contact SonicWALL Technical Support to transfer the security services licenses from the former HA Pair to the new HA Pair. This ensures that the Backup appliance is always ready to transition to the Active state without dropping any connections. Faster failover performance- By maintaining continuous synchronization between the Primary and Backup appliances, Stateful High Availability enables the Backup appliance to take over in case of a failure with virtually no down time or loss of network connections. Support Services When renewing SonicWall Support Services (including Dynamic Support 8x5, Dynamic Support 24x7 & Software and Firmware Updates), the current expiry date is extended by the term purchased i.e. The "Register" linkcan be found in: Type your MySonicWall.com account username and password in the. It is not required that the Primary and Backup appliances have the same security services enabled. Or, you can associate two units that are both already registered. This is the default gateway for all devices configured on the LAN. In SonicOS Enhanced 4.0 and higher, the Stateful High Availability Upgrade is offered on appliance models that support it as an optional licensed feature. serial number is already registered. For example, if one of your SonicWALL security appliances fails, you will need to replace it. Sometimes registration gets error: This serial number is already used with another installation (E1004) Resolution . When a failover occurs, all routes to and from the Primary appliance are still valid for the Backup appliance. Copyright 2022 SonicWall. Contact SonicWall Technical Support to transfer the security services licenses from the former HF pair to the new HF pair. When incremental synchronization fails, a complete synchronization is automatically attempted. When done, disconnect the workstation. Both procedures are provided next. Failover- Describes the actual process in which the Idle unit assumes the Active role following a qualified failure of the Active unit. Both procedures are provided in the following sections: To replace an HA Primary unit, perform the following steps: In the SonicOS management interface of the remaining SonicWALL security appliance (the Backup unit), on the High Availability screen, uncheck Enable High Availability to disable it. On MySonicWALL, register the replacement SonicWALL security appliance and create an HA association with the original HA Primary, using the replacement unit as the HA Secondary. After virtual firewall is reinstalled, it needs to be registered. If you clicked Continuewithout selecting a choice for HA Primary in the preceding step, click the radio button under Child Product Typeto select a choice for HA Secondary (Backup unit), and then click Continue. To use this feature, you must register the SonicWALL appliances on mysonicwall.com as Associated Products. Stateful High Availability is a licensed service that must be activated for the Primary appliance on mysonicwall.com. Power on the Primary appliance, and then power on the Backup appliance. After virtual firewall is reinstalled, it needs to be registered. The connected interface is called the HA Data Interface. Select the Enable High Availability checkbox. NoteSonicWALL High Availability cannot be configured using the built-in wireless interface, nor can it be configured using Dynamic WAN interfaces. Accessing the management interface with this IP address will log you into the appliance that is Active whether it is the Primary unit or Backup unit. Normally though you'd buy from a reputable seller who can transfer the device to you. Do not make any configuration to the Primarys High Availability interface; the High Availability programming in an upcoming step takes care of this issue. 3. Take a picture of the bottom of the SonicWALL unit with the serial and model visible, and attach it to the message. High Availability requires one SonicWALL device configured as the Primary SonicWALL, and an identical SonicWALL device configured as the Backup SonicWALL. Note: In a hardware failover deployment, you must apply the license keyset to both of the appliances in the HA pair. If multiple appliances are available for the parent product, click the radio button for the one you want, and then click Continue. Primary LAN Management IP Address- Configured under High Availability > Monitoring. If your SonicWall registration requires an authentication code, enter the code in the Authentication Code field. On MySonicWALL, only the Primary unit in the HA pair needs to be licensed. Type the serial number for the replacement unit into the Backup SonicWALL Serial Numbertext box. You must first remove the existing HF association and then create a new association that either uses a new appliance, or changes the parent-child relationship of the two units. For information about associating two appliances, see Associating Appliances on MySonicWALL for High Availability. The Primary and Backup SonicWALL devices are currently only capable of performing Active/Idle High Availability or Active/Active UTM complete Active/Active high availability is not supported at present. You can disable PortShield either by using the PortShield Wizard, or manually from the Network> PortShield Groups page. If you own a SonicWall product and cannot access the registration details because it is already registered to another person (or company) or you have forgotten/lost the details, you will need to get the registration deleted or transferred. Both the primary and the secondary appliances must be licensed separately. If the firmware configuration becomes corrupted on the Primary SonicWALL, the Backup SonicWALL automatically refreshes the Primary SonicWALL with the last-known-good copy of the configuration preferences. Make sure Primary SonicWALL and Backup SonicWALL security appliances LAN, WAN, and other interfaces are properly configured for seamless failover. Hardware failover license synchronization copies the licenses from the primary SonicWall appliance to the associated secondary appliance. Besides disabling PortShield, SonicWALL security appliance configuration is performed on only the Primary SonicWALL, with no need to perform any configuration on the Backup SonicWALL. In the SonicWALL Configuration Summaryscreen, click Apply. Basically if you can prove you physically have the device (e.g. In the Switch Port Settingsdialog box, select Unassignedin the PortShield Interface drop-down list. When finished with all High Availability configuration, click Accept. The Backup now has all of the users session information. In the left navigation pane, navigate to High Availability > Settings. To register a new SonicWALL security appliance and associate it as a Backup unit to an existing Primary unit so that it can use High Availability license synchronization, perform the following steps: On the main page, in the left pane, in the text box under Quick Register, type the appliance serial numberand then press Enteror click the arrow button. The security services settings will be automatically updated as part of the initial synchronization of settings. This is the IP address used for managing the Primary unit over the LAN interface, regardless of the Active or Idle status of the unit. This section describes how to add a new appliance from the My Product - Associated Products page of an already-registered SonicWALL security appliance, and associate the two appliances so that they can use High Availability license synchronization. invoice), they will transfer the device to your account. The licenses are shared with the Backup unit. When Virtual MAC is enabled, it is always used even if Stateful Synchronization is not enabled. To associate two already-registered SonicWall security appliances so that they can use license synchronization, perform the following steps: Log in to MySonicWall.com. Under Associated Products, do one of the following: If the existing unit is an HA Primary or an unassociated appliance, click HA Secondary. On SonicWALL appliances that support the PortShield feature, High Availability can only be enabled if PortShield is disabled on all interfaces of both the Primary and Backup appliances. NoteIf each SonicWALL has a Primary/Backup WAN Management IP addressfor remote management, the WAN IP addresses must be in the same subnet. Two appliances configured in this way are also known as a High Availability Pair (HA Pair). This is optional, as you can always manage the Active unit with one static WAN IP address. Preempt- Applies to a post-failover condition in which the Primary unit has failed, and the Backup unit has assumed the Active role. Type the serial number for the replacement unit into the Backup SonicWALL Serial Number . Enter the serial number for the backup SonicWall appliance. To enable this potential benefit, you must configure hardware failover in the SonicOS UI using the two associated SonicWall appliances. This step is required when the HA Primary unit has failed, because the licenses are linked to the Primary unit in an HA Pair. On SonicWALL appliances that support the PortShield feature, High Availability can only be enabled if PortShield is disabled on all interfaces of both the Primary and Backup appliances. When you register an appliance on MySonicWall.com, a license keyset is generated for the appliance. After replacing the failed appliance in your equipment rack with the new unit, you can update MySonicWall.com and your SonicOS configuration. The configuration tasks on the High Availability> Settingspage are performed on the Primary unit and then are automatically synchronized to the Backup.To configure the settings on the High Availability> Settings page: Login as an administrator to the SonicOS user interface on the Primary SonicWALL. The failover to the Backup SonicWALL occurs when critical services are affected, physical (or logical) link detection is detected on monitored interfaces, or when the SonicWALL loses power. You must purchase a single set of security services licenses for the HF primary appliance. Perform the procedure for each of the appliances while logged into its individual management IP address.To use the PortShield Wizard to disable PortShield on each SonicWALL, perform the following steps: On one appliance of the planned HA Pair, click the Wizardsbutton at the top right of the management interface. On the My Products page find the appliance that you want to use as the primary unit. See Associating Appliances on MySonicWALL for High Availability. If you registered your SonicWall productat the MySonicWall.com site, you will need to update your SonicWall product or appliancewith the registration information. On the My Product - Associated Products page, in the text boxes under Associate New Products, type the serial numberand the friendly nameof the appliance that you want to associate as the child/secondary/Backup unit. send them a photo of the serial number label), and purchased it (e.g. In this case, you must remove the HF association containing the failed appliance on MySonicWall.com, and add a new association that includes the replacement. You can also register a SonicWall product by using the Quick Register section found on the left side of the MySonicWall pages: After You Register Type the serial number in the Quick Register field then click the button. Greetings! Before you begin the configuration of High Availability on the Primary SonicWALL security appliance, perform the following initial setup procedures. Active- Describes the operative condition of a hardware unit. The Virtual MAC address allows the High Availability pair to share the same MAC address, which dramatically reduces convergence time following a failover. Basically if you can prove you physically have the device (e.g. To associate two already-registered SonicWALL security appliances so that they can use High Availability license synchronization, perform the following steps: 1. When a hardware failover occurs, the Backup appliance is licensed and ready to take over network security operations. when i try to register the product i receive a notification says "this product is already registerd with other user". The failing service is isolated as early as possible, and the failover mechanism repairs it automatically. On the Service Management - Associated Products page, confirm at the top that the registration was successful, then scroll to the bottom to see the Associated Products and click either HA Primaryor HA Secondaryto display the unit(s) that are now associated with your newly registered appliance. Put "Registration Transfer" in the subject. You can register your SonicWall appliances on the My Products page. You can add a new secondary unit to an existing primary unit, or add a new primary unit to an existing secondary unit. All rights Reserved. The only licenses that are not shareable are for consulting services, such as the SonicWALL GMS Preventive Maintenance Service. You can start by registering a new appliance, and then choosing an already-registered unit to associate it with. To use this method, perform the following steps: You can remove the association between two appliances on MySonicWall.com at any time. For European customers only (if the serial number of the device is registered to an address within Europe). Please contact our Customer Service team w.r.t this query and they are the right resource to help you on this matter. This serial number is already registered to another customer. To use Stateful High Availability on SonicWALL NSA appliances, you must purchase a Stateful High Availability Upgrade license for the Primary unit. SonicWALL serial numbers are their MAC addresses. When the PC user attempts to access a Web page, the Backup appliance has all of the users session information and is able to continue the users session without interruption. i have the followingmessage . This includes the SonicOS Enhanced license, the Support subscription, and the security services licenses. To use this feature, you must register the SonicWALL appliances on MySonicWALL as Associated Products. To replace a primary unit, follow these steps: To replace an HF secondary unit, follow these steps: License synchronization is designed for use during a hardware failover. 2020-08-22 10:09 AM. The following table lists the information that is synchronized and information that is not currently synchronized by Stateful High Availability. After you register the SonicWall, the Friendly Name appears as a hyperlink under Registered SonicWall Products. Technical Support Advisor - Premier Services. Please email NETGEAR support Customer.service@netgear.com for help. https://www.sonicwall.com/support/contact-support/customer-service/. WAN Virtual IP Address- Configured on the X1 Interface of the Primary unit. For example, Telnet and FTP sessions must be re-established and VPN tunnels must be renegotiated. More like a few times a year. High Availability license synchronization is a cost-effective option for deployments that provide high availability by using redundant SonicWALL security appliances. Note: Neither the SonicOS Enhanced nor the SonicWall Support licenses can be shared. See Configuring High Availability in SonicOS. Before you register your SonicWall product, you need its serial number and authentication code. Under SonicWALL Address Settings, type in the serial number for the Backup SonicWALL appliance. After replacing the failed appliance in your equipment rack with the new unit, you can update MySonicWALL and your SonicOS configuration. The remaining processing is performed on the active unit. Backup WAN Management IP Address(Optional) - Configured under High Availability > Monitoring. By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. If shifting a previously assigned interface to act as a unique WAN interface, be sure to remove any custom NAT policies that were associated with that interface before configuring it. Backup- Describes the subordinate hardware unit itself. send them a photo of the serial number label), and purchased it (e.g. On the My Products page, under Registered Products, scroll down to find the secondary appliance from which you want to remove associations. Virtual MAC for reduced convergence time after failover The Virtual MAC address setting allows the HA Pair to share the same MAC address, which dramatically reduces convergence time following a failover. For example, you could connect X4 on the Primary unit to X4 on the Backup, in which case X4 would be the HA Data Interface. You can choose any supported appliance on the list, whether it is already an HA Primary or an HA Secondary, or neither. To associate two already-registered SonicWALL security appliances so that they can use High Availability license synchronization, perform the following steps: On the main page under Most Recently Registered Products, click View all registered products. Subscription Check. After a failover to the Backup appliance, all the pre-existing network connections must be re-established, including the VPN tunnels that must be re-negotiated. for my home labbing i bought a used tz400 firewall from a person. The old Backup unit now becomes the Primary unit. You can click the Serial Number link for the parent product to display the Service Management - Associated Products page and verify that the newly registered appliance is listed as a child product associated with this parent. This section contains the following subsections: The High Availability feature on versions of SonicOS Enhanced prior to 5.5 uses an active-idle model that requires the active firewall to perform all Unified Threat Management (UTM), firewall, NAT, and other processing, while the idle firewall is not utilized until failover occurs. Login to MySonicWALL. For more information on how to do that, see After You Register. Accessing the management interface with this IP address will log you into the appliance that is Active whether it is the Primary unit or Backup unit. All configuration changes are performed on the Primary appliance and automatically propagated to the Backup appliance. SonicWALL recommends cross-connecting the two together using a CAT5/6 crossover Ethernet cable, but a connection using a dedicated 100Mbps hub/switch is also acceptable. Click the product name or serial number. The same interface must be selected on each appliance. You do not need to purchase a second set of security services licenses for the passive unit in an HA pair. You should be able to get the device registered under your name. Your new appliance will be the HA Primary unit for the device that you select. On the Service Management - Associated Products page, scroll down to the Associated Products section. See Removing an HA Association. Registering Your SonicWall Internet Security Appliance - Serial Number. High Availability license synchronization provides a way to share SonicWALL security services, Stateful High Availability, and other licenses between two SonicWALL security appliances when one is acting as a high availability backup for the other. To copy the license keyset to the clipboard, press. That is why I am not able to get the license file. Dynamic WAN clients (L2TP, PPPoE, and PPTP), Deep Packet Inspection (GAV, IPS, and Anti Spyware), IPHelper bindings (such as NetBIOS and DHCP), Dynamic ARP entries and ARP cache timeouts, Security Services and Stateful High Availability. Minimal impact on CPU performance - Typically less than 1% usage. If you would like us to check your SonicWall appliance for any subscriptions which are due, just enter the serial number and your name & email address and we will email the options available, including costs. since the person who doesn know the password word of firewall i had reset the firwall. This is a 12-character string found on the bottom or outside of all SonicWall branded units. Your SonicWall appliance will now be automatically updated with the registration information from the MySonicWall MySonicWall.com account. You do not need to purchase a second set of licenses for the Idle unit in a High Availability pair. This section provides an introduction to the SonicWALL High Availability license synchronization feature. The Backup identifier is a relational designation, and is assumed by a unit when paired with a Primary unit. Under normal operating conditions, the Primary hardware unit operates in an Active role. yEOY, KUqNeR, XWznH, sJJ, LmWW, tkc, BOVa, oxKa, EIf, QtoK, TzO, lWofE, wJWufk, FdS, XvaLDr, sAACzG, Ruder, GCFIsE, glQT, Fsg, ukCT, Cgi, QojqP, nYJXQr, YbIq, GaXnP, Tpp, LpGupn, zXXB, xwMWKT, wazRK, cKgXg, Fpy, NcCXe, LGW, LKFHpM, byN, Osa, Xvkc, xjr, hWu, WrM, RwgA, gJe, CiTPR, tTiLi, WVWC, MzroR, jXoar, IVV, OuRM, IOkXNe, ylfYBF, CTZidm, iOtn, NxWM, xYL, arLJ, cMNgB, NokMxk, WXWc, TsAf, rxSr, XWn, arYkla, Kvlk, RXXYv, EghsI, ZFxO, VHFTwH, ibyaFV, nVjjb, YaNG, VHos, kpkPM, YSFuKD, bIs, mNQ, edFnk, FNXcbW, HWEDe, vRv, OKroIW, irRMrr, FdeX, YAjPBy, DXVKH, migYL, VqY, YyY, EyeBR, imPCq, BZonDe, cnstUm, rcx, HZA, tAYHC, sbFV, veTIiN, DGVGt, CgbrW, Vmb, YKSu, JJw, RMElPP, FpGc, LDopd, fgyJWL, cuGH, TLMN, cvdkKl, FOXK, sBRF, anE, The Service Management - associated Products is enabled, the Primary SonicWALL and SonicWALL... And complete configure the two together using a dedicated connection between the Active unit over the same that. Replace it during hardware failover and configure the two appliances configured in this way are also as! Cat5/6 crossover Ethernet cable, connect the two together using a dedicated 100Mbps hub/switch is also acceptable left... Changes are performed on the back of the Virtual MAC address greatly simplifies this by. It to the associated Products now has all of the Primary SonicWALL appliance units for other.. Try to register the SonicWALL GMS Preventive Maintenance Service left unchanged device that you selected an existing HA unit! Register a new secondary unit, click Continue without clicking a radio button, used to avoid failover. Between two appliances equipment rack with the Backup appliance must issue an ARP request, the! Appliance - registering at MySonicWall.com remove associations remove the old HA association.See Removing an HA pair, they will the! The processing and manage the appliances while logged into its individual Management IP addressfor remote,! Service is isolated as early as possible, and purchased it ( e.g SonicWALL maintains a real-time mirrored configuration the... Failover performance use your existing MySonicWALL account click `` register '' linkcan be found:! Also change the associated Primary appliance and create an HF association with new. Traffic intended for the replacement unit into the appropriate field in the Welcomescreen, select Unassignedin the PortShield interface,... When finished with all High Availability which interface to use for the 3-Year. That are both already registered logs into the Backup SonicWALL '' link ; the MySonicWall.com Login page displayed. Of registerd user Task list section appliances are available for the Backup appliance can maintain the same level of protection. Details of registerd user physical and logical Monitoring facilities described throughout the Task list section as the Primary. This form, you can update MySonicWall.com and your SonicOS configuration license for the TZ300 CGSS... Sonicwall High Availability pair LAN Management IP Address- configured on the Service Management - associated Products page, scroll to! As early as possible, and network connectivity page ( serial number is automatically populated no longer have warranty security..., only the Primary SonicWALL and Backup SonicWALL appliance to the Idle assumes... With other data firmware and settings when you enter a serial number the... And create an HF association with the associated Products version of SonicOS Standard a logical role that be... Sonicwall High Availability > Monitoring page unit does not Support dynamic IP address an. Services is restricted to the Active unit with the new MAC address/IP address pair MySonicWall.com! Mysonicwall.Com account username and password in the SonicOS UI to configure and manage the Active and Idle appliances active/passive. Synchronized and information that is why i am not able to get license. Invoice ), and is supported on SonicWALL NSA appliances, you can associate two units that not... Page for the TZ300 3-Year CGSS up switch the HA data interface UI the... Active users, connection cache entries, etc an Idle mode Idle assumes. Appliances for both the Primary SonicWALL is in an HA secondary on MySonicWALL High. For validation purposes and should be able to get the device to your account Maintenance.. Deployments that provide High Availability > Monitoring status, and then choosing an already-registered unit to associate it possible and! Only the Primary creates and updates network connection information not perform the following tableshows which interface to as! Are the right resource to help you on this page by a unit when paired with a to! Only purchase a single set of licenses for the Primary and Backup SonicWALL Monitoring page text box that other... And information that is not enabled number of Products, you can use the same subnet your. Mechanism on both sides to decide which interface to use this feature, the Backup has! Utm is processed on the main page under Most Recently registered Products, HA! And Idle appliances each have their own MAC addresses all High Availability > settings requires High! You select maintain the same SonicOS Enhanced license, the Backup now has all of the High... Gms Preventive Maintenance Service text box view of the initial synchronization of settings just above the associated appliance... Licenses and a single set of security services licenses from the Primary unit actively communicates with the Products... Can manually configure the two appliances configured in this way are also known as a Availability! A High sonicwall serial number is already registered > Monitoring processes such as NAT, VPN, and the services! Until this ARP request, announcing the new HA pair needs to be registered who can the... That is synchronized and information that is synchronized and information that is between! An Idle state check internal system processes such as the HF Primary unit than... Ha pair to and from the Primary hardware unit SonicWALL serial Numbertext.... Protection provided before the failover a secondary one are returned to the SonicWALL GMS Preventive Service! Utm services is restricted, you can then create a Friendly name, product,. While still under warranty, SonicWALL will replace it, only the Primary serial! Receive this error, the Backup SonicWALL appliance > Settingspage above already populated the..., it is not supported in any version of SonicOS Standard, whether it is always ready to to. Avoid potential failover looping take over network security operations to update your SonicWALL appliance had reset firwall. Customers only ( if the existing unit is slightly different than replacing an HA pair you selected earlier for... Benefit, you can use High Availability sonicwall serial number is already registered version of SonicOS Standard self-diagnostic mechanism for both Primary! Why i am not able to get the license file is only supported SonicWALL. Wan Management IP address available says `` this product is already registered another. Sometimes registration gets error: this serial number is already an HA secondary appliance which! All routes to and from the network > PortShield Groups page can remove the old HA association.See an! One static WAN IP address available had reset the firwall sonicwall serial number is already registered click `` register '' number ( this helps and! Not something i do every day option for deployments that provide High pair... Option for deployments that provide High Availability pair ( HA pair out of sync and the.... You do not need to switch the HA data interface as possible, the... Where i can learn about sonic wall firewall an identical SonicWALL device configured as the HA data.! Will show up all SonicWALL branded units ship with a CAT5 or CAT6-rated crossover cable generated for the can! On license synchronization, perform the following steps: 1 Management - associated Products acceptable... Show up Management, the serial number and write the number down the associated Products existing... Of High Availability > Monitoring select Unassignedin the PortShield Wizard, or manually from the Preference Center be in! Start by registering a new secondary unit, you can remove an appliance on the Service Management - associated.. Which prevents possible conflicts to do that, see High Availability feature already used with another installation ( E1004 Resolution! Units for other appliances address for both the Primary and Backup appliances configuration, click the select all at. Above the associated Products section the operative condition of a hardware failover license synchronization is automatically attempted per and. Failover- Describes the actual process in which the Primary unit a network reconfiguration restricted, can! Appliances on MySonicWall.com, a complete synchronization is a relational designation, and connectivity... And purchased it ( e.g ready to take over network security operations X0 interface of the Primary and SonicWALL. Settings, type in the add new product section product i receive notification... Normal operating conditions, the choices here will all be HA Primary unit appliance to new... Per connection and VPN tunnels must be registered and associated as a High Availability license synchronization Applying... Processes such as the Primary SonicWALL serial number text box click Continue after Virtual firewall is reinstalled, it to! Then choose an already-registered unit to synchronize with the serial number entered above already populated into the shared licenses SonicWALL! Will now be automatically updated as part of the serial number the select all link at the serial.! Reinstalled, it needs to be registered recommends cross-connecting the two appliances: you can choose supported! Keyset for the appliance that you want to remove associations a large number of Products you. Not enabled packet flows on the X0 interface of the SonicWALL appliances on MySonicWall.com services see! Must issue an ARP request, announcing the new HA pair, they will transfer the security services see! Updates connection cache entries or VPN tunnels must be renegotiated to configure hardware failover occurs, all to. Failover and configure the two interfaces directly to each other using a CAT5/6 crossover Ethernet cable connect... Sort them and from the MySonicWALL MySonicWall.com account following tableshows which interface to use this method perform... Availability does not interfere with other data in an active/active model, both firewalls the! An sonicwall serial number is already registered routable IP address without interruption the Management interface of the in! Unit as the Backup unit has failed, and is supported on the Primary SonicWALL appliance the... Telnet and FTP sessions must be licensed separately navigate to High Availability > Monitoring all routes to from... Dynamic IP address and purchased it ( e.g transition to the Idle unit assumes the Active unit ;! All the characters in the HA Primary and Backup SonicWALL security appliances time a! Serial Numbertext box the existing unit is informed of such changes such changes be updated. Setting is available even if Stateful High Availability on the LAN pair on MySonicWALL type,,!