Configure probe monitoring for WAN Failover and Loadbalancing - SonicWall UTM

Configure Probe Monitoring for WAN Failover and Load Balancing

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

1. On the Network | System | Failover & Load Balancing, under Groups, click Configure on the interface on which you would want to enable probe monitoring, and click the radio button Logical/Probe Monitoring enabled.
2. From the drop-down menu, select one of the following:
   NOTE: Recommended to use the first option for seamless failover 
   
   • Probe succeeds when either Main Target or Alternate Target responds.
   • Probe succeeds when both Main Target and Alternative Target respond.
   • Probe succeeds when Main Target responds.
   • Succeeds Always (no probing).
   • Please note that responder.global.sonicwall.com does not respond to ICMP (ping) requests and can only be probed over TCP port 50000. Therefore, its IP address should not be used as the Default Target IP if the Main and Alternate Targets have been modified from their default values.
3. Select Ping or TCP from the Probe Target menu.
4. Enter the IP address of the target device/DNS address (For example: Ping to 8.8.8.8, 9.9.9.9 or any fast responding URLs)
5. Enter a port number for TCP
6. Configure the Secondary WAN probe settings in a similar format.
7. Click OK.
   

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

1. On the Manage |Network |Failover & Load Balancing, under Groups, click Configure on the interface on which you would want to enable probe monitoring, click radio button Logical/Probe Monitoring enabled.
2. From the drop-down menu, select one of the following:
   NOTE: Recommended to use the first option for seamless failover 
   
   • Probe succeeds when either Main Target or Alternate Target responds.
   • Probe succeeds when both Main Target and Alternative Target respond.
   • Probe succeeds when Main Target responds.
   • Succeeds Always (no probing).
   • Please note that responder.global.sonicwall.com does not respond to ICMP (ping) requests and can only be probed over TCP port 50000. Therefore, its IP address should not be used as the Default Target IP if the Main and Alternate Targets have been modified from their default values.
3. Select Ping or TCP from the Probe Target menu.
4. Enter the IP address of the target device/DNS address (For example: Ping to 8.8.8.8, 9.9.9.9 or any fast responding URLs)
5. Enter a port number for TCP
6. Configure the Secondary WAN probe settings in a similar format.
7. Click OK.
    
   
   

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

1. On the Network| WAN Failover & Load Balancing page, under WAN Interface Monitoring, check the Enable Probe Monitoring box.
2. Check the Respond to Probes box to have the SonicWall respond to TCP probes received on its WAN ports.
3. Check the Any TCP-SYN to Port box to respond to TCP probes to the specified port number without validating them. This box should be checked when receiving TCP probes from SonicWalls running SonicOS Standard or older.
   

   NOTE: If there is a NAT device between the two devices sending and receiving TCP probes, the Any TCP-SYN to Port box must be checked, and the same port number must be specified here and in the Configure WAN Probe Monitoring window.

4. Click Configure.
5. In the Primary WAN Probe Settings menu, select one of the following:
   • Probe succeeds when either Main Target or Alternate Target responds.
   • Probe succeeds when both Main Target and Alternative Target respond.
   • Probe succeeds when Main Target responds.
   • Succeeds Always (no probing).
   • Please note that responder.global.sonicwall.com does not respond to ICMP (ping) requests and can only be probed over TCP port 50000. Therefore, its IP address should not be used as the Default Target IP if the Main and Alternate Targets have been modified from their default values.
6. Select Ping or TCP from the probe target menu.
7. Enter the IP address of the target device.
8. Enter a port number.
9. Check the SNWL? box only if the target device is a SonicWall.
10. Configure the Secondary WAN probe settings.
11. If you are using the Modem as a backup connection, configure the Dialup WAN probe settings.
12. Click OK.