Managing High Availability - Watchguard V10 Supplementary Manual

Managing High Availability

Configuring Policies
Changes to the policy configuration and other system settings in the
Active appliance are automatically synchronized to the secondary system,
provided that the secondary appliance has not failed.
A failed appliance will automatically retrieve the new policy
configuration from the active appliance when it recovers from the failure.
In rare situations, configurations can get out of sync, and one appliance
may be left in the ADMIN state. You can perform a manual HASync to
sync the two appliances again.
Analyzing System Failures
When an appliance fails, the other active appliance takes over processing.
When you log into the active appliance using Vcontroller, check the
System Status in the lower left corner to determine which appliance you
are connecting to. Note that in Active/Active mode, you will be
connected to the secondary appliance if the primary appliance has failed,
even if you connect via the IP address of the private interface on the
Primary appliance.
Checking HA system status
The WatchGuard Vcontroller provides a quick-check feature that tells
you, at a glance, the status of your HA system. Look in the lower-left
corner of the WatchGuard Vcontroller for the system indicator.
The "HA" monitor tells you which appliance you are logged into,
whether it is Primary or Secondary, and whether it is Active or Failover..
High Availability Guide

Managing High Availability

13