- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
SMB SSL-VPN: Configuring High Availability on SRA Virtual Appliance
03/26/2020 
32 People found this article helpful
99,939 Views
Description
SMB SSL-VPN: Configuring High Availability on SRA Virtual Appliance
Resolution
Feature/Application:
High Availability allows two identical SRA appliances or virtual appliances to provide a reliable, continuous connection to the public Internet. The two SRA appliances are deployed at the same time and connected together, and are called a High Availability Pair (HA Pair).
Procedure:
The High Availability > Settings page provides settings for configuring High Availability.
To enable High Availability for a Virtual Machine and configure the options in the High Availability Settings section, perform the following steps:
Step 1: In a browser, log in to the primary unit and navigate to the High Availability > Settings page.
Step 2: Select the Enable High Availability check box. The HA interface can only be set when the unit is in the HA unconnected mode, and both units must be set to the same interface.
Step 3: Select the Primary Appliance check box if this Virtual Machine is the primary appliance in the HA pair.Step 2: Select the Enable High Availability check box. The HA interface can only be set when the unit is in the HA unconnected mode, and both units must be set to the same interface.
Step 4: Select the High Availability Interface from the drop-down list. The HA interface can only be set when the unit is in the HA unconnected mode, and the interface must be set to the same interface on both units.
Step 5: Enter a number of milliseconds for the Heartbeat Interval. The heartbeat is used to test the connectivity between the primary and backup devices. The heartbeat interval controls how often the two units communicate. The minimum is 500 milliseconds (a half second), and the maximum is 300,000 milliseconds (5 minutes).
Step 6: Enter a value for the Failover Trigger Level. This is the number of heartbeats that must be missed before failover occurs. The minimum is 4, and the maximum is 99.
Step 7: Click Accept.
Step 8: In the browser, open a new tab and point it to the IP address of the backup unit. Log in to the backup.
Step 9: Configure High Availability on the backup unit. When you click the Accept button, the backup device will become IDLE and you will no longer be able to access it with its IP address. The primary device is now Active with the same settings it had before the HA configuration.
The appliances in the HA Pair immediately begin to synchronize data from the primary to the backup unit. When failover occurs and the primary is down, the backup unit will become Active with the same settings as the primary.
Related Articles
- Configuring Device Management based on Device ID for SMA 100
- CT with Device Guard is stuck on Identifying when GVC Client is installed
- SMA1000: CT compatibility with 3rd party VPN clients like GVC, Citrix and Fortinet
YES
NO