• SonicOSX 7
• Product Overview
  • Enterprise Class High-performance Firewall
  • Feature Summary
    • Simplified Management and Reporting
    • Advanced Threat Protection
    • Capture Cloud Platform
    • Deep Packet Inspection of SSL/TLS (DPI-SSL)
    • Content Filtering Service
    • Intrusion Prevention Service
    • Application Control
    • Unified Policy Configuration and Management
    • Multiple Instances / High Availability
  • System Architecture
  • Hardware Overview
    • Front Panel
    • Rear Panel
    • LEDs
    • Specifications
• System Setup
  • Default Settings
  • System Startup
    • HTTPS Management via X0
    • HTTPS Management via MGMT Port
      • Using SafeMode
      • Using CLI
  • SonicOSXBasic Configuration
  • Connecting LAN and WAN Interfaces
  • Network Configuration
  • Registration and Licensing
• Configuring Multiple Instances
  • Enabling Multi-Instances
  • Configuring Multi-Instances
• Licenses for Multiple Instances
  • Surveying Multiple Instances
  • Instance Registration
  • Instance License Update
  • Deactivating an Instance
  • Instance HA Pair on a Standalone NSsp Node
• Configuring High Availability
  • High Availability Overview
  • Setting Up Unit-to-Unit HA
  • Configuring Advanced Settings
  • Checking High Availability Status
  • Monitoring High Availability
  • Configuring Multi-Appliance Instance-Level HA
• CLI Bring-up
  • Access the Console Port
  • At the ChassisOS Prompt
  • To Change to the Console Port of Another Physical Blade
  • Check Network Address Settings
  • Commands at ChassisOS Prompt
  • Show Commands at ChassisOS Prompt
  • Configure IP Addresses from the CLI
  • Restart SonicOSX from the CLI
  • To Access SonicOSX Console
• Using the SafeMode GUI
  • Accessing SafeMode
  • Rebooting the System
  • Upgrading Firmware
  • Diagnostics
• SonicWall Support
  • About This Document

Configuring Advanced Settings

To configure advanced settings

1. Navigate to DEVICE | High Availability > Advanced.

   

2. Adjust the Heartbeat Interval to control how often the security appliances in the Active/Standby pair communicate. The default is 1,000 milliseconds (one second), the minimum value is 1,000 milliseconds, and the maximum is 300,000. A heartbeat interval of at least 1000 is recommended.
3. Set the Failover Trigger Level to the number of heartbeats that can be missed before failing over. The default is five, the minimum is four, and the maximum is 99.

   This timer is linked to the Heartbeat Interval timer. If the Failover Trigger Level is set to five and the Heartbeat Interval is set to 10000 milliseconds (10 seconds), it takes 50 seconds without a heartbeat before a failover is triggered.

4. Set the Probe Interval to the interval, in seconds, between probes sent to specified IP addresses to monitor that the network critical path is still reachable. This interval is used in logical monitoring for the local HA pair. The default is 20 seconds, and the allowed range is five to 255 seconds.

   A probe interval of at least five seconds is recommended.

5. Set the Probe Count to the number of consecutive probes before SonicOSX concludes that the network critical path is unavailable or the probe target is unreachable. This count is used in logical monitoring for the local HA pair. The default is three, and the allowed range is three to 10.
6. Set the Election Delay Time to the number of seconds the Primary security appliance waits to consider an interface up and stable. The default is three seconds, the minimum is three seconds, and the maximum is 255 seconds.
7. Set the Dynamic Route Hold-Down Time to the number of seconds the newly-active security appliance keeps the dynamic routes it had previously learned in its route table. The default value is 45 seconds, the minimum is 1 second, and the maximum is 1200 seconds (20 minutes).

   In large or complex networks, a larger value might improve network stability during a failover.

8. If you want Failover to occur only when ALL aggregate links are down, select Active/Standby Failover only when ALL aggregate links are down. This option is not selected by default.
9. To have the appliances synchronize all certificates and keys within the HA pair. select Include Certificates/Keys. This option is selected by default.
10. (Optional) To synchronize the SonicOSX preference settings between your primary and secondary HA firewalls, click SYNCHRONIZE SETTINGS.
11. (Optional) To synchronize the firmware version between your primary and secondary HA firewalls, click SYNCHRONIZE FIRMWARE.
12. (Optional) To test the HA failover functionality is working properly by attempting an Active/Standby HA failover to the secondary security appliance, click FORCE ACTIVE/STANDBY FAILOVER.
13. When finished with all High Availability configuration, click ACCEPT. All settings are synchronized to the secondary NSsp.