- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
How to setup SMA1000 Appliances behind Load balancer.
01/29/2021 
9 People found this article helpful
44,506 Views
Description
How to setup SMA1000 Appliances behind Load balancer
Resolution
Problem/Query:
How to setup SMA1000 Appliances behind Load balancer
Resolution/Answer:
- Users Access could be distributed accross devices.
- Support more users.
- Load distribution.
- Redundancy
- SMA appliances can be clustered up to eight appliances using an external load balancer.
- This feature is not intended to provide high availability.
- Administrators can use third- party global load balancers such as F5, Cisco, and RadWare.
Health checks from external load balancers is allowed on appliances, which allows the load balancer to know which services are running on the appliance so that traffic can be failed over to another system in the event of maintenance or failure.
Important configurations to remember while setting up SMA appliances behind load balancer:
You can configure the E-Class SRA appliance to use either a single-homed or dual- homed configuration.
Configure the SSL certificate to contain the load balancer' s virtual IP address or host name (not the host name or address for the individual appliance)
Set the default external gateway on the appliance(s) to the IP address of the load balancer or switch connected to load balancer
To check the appliance status, we may need to create health check monitors for the following on external load balancer:-
- Workplace service which runs on the external interface of the appliance using https port 443
- AMC Service which runs on the internal Interface of the appliance using port 8443.
- Any SNMP based monitors (using Aventail MIBs) in order to perform Health check monitoring.
SMA1000 Supports Load Balancing and Failover operations by Implementing SonicWall SMA1000 Product Using CMS/GTO based deployment.
Related Articles
- How to secure Virtual Office portal from all external access
- NetExtender users fail to get connected throwing an Error Failed to get vpn protocol on firmware 10.2.1.2 or above due to misconfigured protocol
- Is SRA/SMA appliance vulnerable to CVE-2016-2183 and CVE-2016-5915?
YES
NO