ZyXEL Communications ZyWALL 110 User Manual page 569

Chapter 34 Device HA
• Startup configuration file (startup-config.conf)
• AV signatures
• IDP and application patrol signatures
• System protect signatures
• Certificates (My Certificates, and Trusted Certificates)
Synchronization does not change the device HA settings in the backup ZyWALL/USG.
Synchronization affects the entire device configuration. You can only configure one set of settings
for synchronization, regardless of how many VRRP groups you might configure. The ZyWALL/USG
uses Secure FTP (on a port number you can change) to synchronize, but it is still recommended
that the backup ZyWALL/USG synchronize with a master ZyWALL/USG on a secure network.
The backup ZyWALL/USG gets the configuration from the master ZyWALL/USG. The backup
ZyWALL/USG cannot become the master or be managed while it applies the new configuration. This
usually takes two or three minutes or longer depending on the configuration complexity.
The following restrictions apply with active-passive mode.
• The master ZyWALL/USG must have no inactive monitored interfaces.
• The backup ZyWALL/USG cannot be the master. This refers to the actual role at the time of
synchronization, not the role setting in the configuration screen.
The backup applies the entire configuration if it is different from the backup's current configuration.
ZyWALL/USG Series User's Guide
569