- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
What happens when a Standby Appliance gets activated CMS/GTO?
10/22/2020 
10 People found this article helpful
35,023 Views
Description
This article provides some example scenarios and working of Failover in CMS/GTO setup
Resolution
When a standby appliance gets activated:
• Existing user sessions from failed appliances may be resumed on the newly activated appliance and will be allowed to continue until the sessions are either terminated by users or by timing out.
• SMA Tunnel clients, such as Connect Tunnel and Mobile Connect & CTDG will detect a connection failure and automatically reconnect to the GTO service.
• ActiveSync client requests will get directed to the standby appliance.
• On Active-Active Scenarioes failover will happen in few seconds.
• Web-based client applications will reconnect to the standby appliance when users refresh the browser Window and authenticate again.
Some of the example scenarios,
Scenario 1: One Active and one Standby Appliance
GTO working: Standby appliance is guaranteed to activate 10 - 15 minutes after all designated GTO appliances lose communication with the Standby appliance. To reduce the Failover time, we need to add a CEM value.
Refer the below link for more inforomation :-
https://www.sonicwall.com/support/knowledge-base/how-to-reduce-failover-time-where-for-an-appliance-in-standby-mode-in-cms-gto/200524191923080/
Scenario 2: Environment:
-One Active and one Standby Appliance in U.S (Note: A Minimum should have Two Active nodes (Active-Avtive) and one Standby node is recommended)
-One Active and one Standby Appliance in Europe
GTO Working: If the active device in U.S goes down, the connections will be directed to the active device in Europe and the standby device in U.S wouldn't become active since the Standby device waits for a response for 10 to 15 minutes before switching to the active state.
Scenario 3: One Active and one Standby Appliance
Issue: CMS is down.
GTO working: This does not affect the GTO service and the active appliance continues to serve users request made to the GTO name.
Related Articles
- How to secure Virtual Office portal from all external access
- NetExtender users fail to get connected throwing an Error Failed to get vpn protocol on firmware 10.2.1.2 or above due to misconfigured protocol
- Is SRA/SMA appliance vulnerable to CVE-2016-2183 and CVE-2016-5915?
YES
NO