• SonicOS 7.1
• About SonicOS
  • Working with SonicOS
  • SonicOS Workflow
  • How to Use the SonicOS Administration Guides
  • Guide Conventions
• High Availability
  • About High Availability
    • High Availability Terminology
    • High Availability Modes
    • High Availability Encryption
    • Crash Detection
    • Virtual MAC Address
    • Dynamic WAN Interfaces with PPPoE HA
    • Stateful Synchronization with DHCP
    • Stateful Synchronization with DNS Proxy
    • About HA Monitoring
  • Understanding High Availability
    • Understanding SonicWall High Availability Operation Modes
    • About Active/Standby HA
  • Benefits of Active/Standby HA
    • Working of Active/Standby HA
    • About Stateful Synchronization
    • Benefits of Stateful Synchronization
  • How Does Stateful Synchronization Work?
    • Example of Stateful Synchronization
    • Active/Standby Prerequisites
  • Supported Platforms and Licensing for HA
    • Physically Connecting Your Security Appliances
    • Maintenance
      • Removing an HA Association
      • Replacing a SonicWall Security Appliance
• Replacing an HA Primary Unit
  • Replacing an HA Secondary Unit
    • High Availability Status
    • Active/Standby High Availability Status
    • High Availability Status
• High Availability Config
  • High Availability Licenses
  • Configuring High Availability
• Configuration of HA Active/Standby
  • Configuring Active/Standby High Availability Settings
    • Configuring HA with Dynamic WAN Interfaces
    • Configuring Network DHCP and Interface Settings
    • Disabling the SonicOS DHCP Server
    • Configuring Virtual IP Addresses
    • Configuring Redundant Ports
    • Fine Tuning High Availability
    • Advanced Settings
    • Configuring Advanced High Availability Settings
    • Monitoring High Availability
    • Configuring Active/Standby High Availability Monitoring
• IPv6 High Availability Monitoring
  • IPv6 HA Monitoring Considerations
  • SonicWall Support
• About This Document
  • Configuring Active/Standby High Availability Monitoring
  • IPv6 High Availability Monitoring
  • IPv6 HA Monitoring Considerations
• Azure Use Cases
  • Use Case 1: Manage Azure HA Firewall
  • Use Case 2: Forward LAN traffic to the External Network through the Gateway after HA Failover
  • Use Case 3: Configure DNAT on Azure HA Firewall
  • Use Case 4: Configure DNAT on Azure HA Firewall (Need to move multiple floating IPs support)
• SonicWall Support
  • About This Document

Set up an Active/Standby High Availability Configuration Using Azure

SonicWall NSv series brings industry-leading NGFW capabilities, such as application intelligence and control, real-time monitoring, IPS, TLS/SSL decryption and inspection, advanced threat protection, VPN, and Network segmentation capabilities, to protect your Azure environment. The following scenario will show how to deploy a high-availability environment using two Sonicwall NSv in Microsoft Azure's cloud platform.

Azure lets you add cloud capabilities to your existing network through its platform as a service (PaaS) model or entrust Microsoft with all your computing and network needs with Infrastructure as a Service (IaaS).

Product Matrix Table

Product Models	NSv 270	NSv 470	NSv 870
Maximum Cores	2	4	8
Minimum Total Cores	2	2	2
Management Cores	1	1	1
Maximum Data Plane Cores	1	3	7
Minimum Data Plane Cores	1	1	1

HA requires a minimum of three interfaces for High-Availability Exchange Messages. Hence, the VM size should be selected as Standard D3_V2 for GEN 7 template deployment. By default, the SonicWall custom template already sets the value Standard_D3_v2.

For example, the following IP addresses are used in this guide.

GEN7NSvHA-01
Vnet	192.168.0.0/16
Resource Group	High Availability Standby
WAN IP X1	192.168.1.4/24
LAN IP X0	192.168.2.4/24
HA IP X2	192.168.3.4/24

GEN7NSvHA-02
Vnet	192.168.0.0/16
Resource Group	High Availability Standby
WAN IP X1	192.168.1.5/24
LAN IP X0	192.168.2.5/24
HA IP X2	192.168.3.5/24

For the HA interface, use only /24 subnet. There is no such limitation for other interfaces like X0 or X1.

Topology

• Install the Custom Template
• Enable Identity of Both Virtual Machines (HA1 and HA2)
• Role Assignment
• Check the Networking Tab
• Configuring Active NSv Firewall Using the Associated Public IP
• Configuring Standby NSv Firewall Using the Associated Public IP
• Enable the L3 Mode
• Configuring Active NSv Firewall Using the Floating Public IP
• Configuring HA to Active/Standby with L3 HA link
• Adding Additional Floating Public IP