Click the "Register" link; the MySonicWall.com Login page is displayed. After virtual firewall is reinstalled, it needs to be registered. Minimal impact on bandwidth- Transmission of synchronization data is throttled so as not interfere with other data. Register the replacement SonicWall security appliance and create an HF association with the new primary (original backup) unit as the HF primary, and the replacement unit as the HF secondary. Lasso Logic branded units ship with a 6- to 8-digit serial number on the side of the unit. More like a few times a year. When you register an appliance on MySonicWall.com, a license keyset is generated for the appliance. To associate two already-registered SonicWALL security appliances so that they can use High Availability license synchronization, perform the following steps: On the main page under Most Recently Registered Products, click View all registered products. 2. The label on the bottom of your SonicWall appliance. A security ecosystem to harness the power of the cloud, Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions, Access to deal registration, MDF, sales and marketing tools, training and more, Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials, 03/26/2020 17 People found this article helpful 185,409 Views. Its serial number is automatically displayed in the Primary SonicWALL Serial Number text box. High Availability license synchronization is a cost-effective option for deployments that provide high availability by using redundant SonicWALL security appliances. You might need to remove an existing HF association if you replace an appliance or reconfigure your network. On MySonicWALL, remove the old HA association.See Removing an HA Association. Hardware failover license synchronization copies the licenses from the primary SonicWall appliance to the associated secondary appliance. Both units must be registered and associated as a High Availability pair on MySonicWALL before physically connecting them. The licenses are shared with the Backup unit. The following tableshows which interface to use for the various SonicWALL security appliance platforms. You do not need to purchase a second set of licenses for the Backup unit in a High Availability Pair. Both appliances must be the same SonicWall model, and both must be separately licensed for SonicOS Enhanced. It is not required that the Primary and Backup appliances have the same security services enabled. If the Primary device loses connectivity, the Backup SonicWALL transitions to Active mode and assumes the configuration and role of Primary, including the interface IP addresses of the configured interfaces. If your product has an authentication code, type this into the, If your SonicWall registration requires an authentication code, enter the code in the. The Idle identifier is a logical role that can be assumed by either a Primary or Backup hardware unit. WAN Virtual IP Address- Configured on the X1 Interface of the Primary unit. Clear the Backup SonicWALL Serial Number text box. Type the serial number for the replacement unit into the Backup SonicWALL Serial Numbertext box. This eliminates the possibility of configuration errors and ensures the uniqueness of the Virtual MAC address, which prevents possible conflicts. This section contains the following subsections: What is High Availability License Synchronization? On SonicWALL appliances that support the PortShield feature, High Availability can only be enabled if PortShield is disabled on all interfaces of both the Primary and Backup appliances. Contact SonicWall Technical Support to transfer the security services licenses from the former HF pair to the new HF pair. Stateful High Availability (SHA) provides dramatically improved failover performance. The remaining processing is performed on the active unit. Both procedures are provided in the following sections: To replace an HA Primary unit, perform the following steps: In the SonicOS management interface of the remaining SonicWALL security appliance (the Backup unit), on the High Availability screen, uncheck Enable High Availability to disable it. After replacing the failed appliance in your equipment rack with the new unit, you can update MySonicWALL and your SonicOS configuration. Accessing the management interface with this IP address will log you into the appliance that is Active whether it is the Primary unit or Backup unit. When the PC user attempts to access a Web page, the Backup appliance has all of the users session information and is able to continue the users session without interruption. Adjust time or heartbeat settings in the four text boxes. If you have any of them laying around, or even if you already tossed one but still have the serial number, than can be your qualifier. You can disable PortShield either by using the PortShield Wizard, or manually from the Network> PortShield Groups page. How Does Stateful High Availability Work? The LAN (X0) interfaces are connected to a switch on the LAN network. Use one of the procedures below to apply a license keyset to an appliance. Basically if you can prove you physically have the device (e.g. . When done, disconnect the workstation. In this case, you need to remove the HA association containing the failed appliance in MySonicWALL, and add a new HA association that includes the replacement. Put "Registration Transfer" in the subject. Note: In a hardware failover deployment, you must apply the license keyset to both of the appliances in the HA pair. The benefits of the Active/Active UTM feature include the following: Both the firewalls in the HA pair are utilized to derive maximum throughput, GAV, IPS, Anti-Spyware, and Application Firewall services are the most processor intensive, and concurrent processing of these services on the idle firewall while the active firewall performs other processing provides the most throughput gain. Next-generation firewall for SMB, Enterprise, and Government, Comprehensive security for your network security solution, Modern Security Management for todays security landscape, Advanced Threat Protection for modern threat landscape, High-speed network switching for business connectivity, Protect against todays advanced email threats, Next-generation firewall capabilities in the cloud, Stop advanced threats and rollback the damage caused by malware, Control access to unwanted and unsecure web content, How can I Register a Product in mysonicwall, SSLVPN Timeout not working - NetBios keeps session open, Configuring a Virtual Access Point (VAP) Profile for Internal Wireless Corporate Users, How to hide SSID of Access Points Managed by firewall. All security services you see on the Security Services > Summaryscreen are shareable, including Free Trial services. On the My Products page, under Add New Product, type the friendly name for the appliance and the authentication code into the appropriate text boxes, and then click Register. Using a standard Ethernet cable, connect the two interfaces directly to each other. In an active/active model, both firewalls share the processing. Until this ARP request propagates through the network, traffic intended for the Primary appliances MAC address can be lost. Sometimes registration gets error: This serial number is already used with another installation (E1004). For SonicWALL appliances that support PortShield, High Availability requires that PortShield is disabled on all interfaces of both the Primary and Backup appliances prior to configuring the HA Pair. By default, this Virtual MAC address is provided by the SonicWALL firmware and is different from the physical MAC address of either the Primary or Backup appliances. Without Virtual MAC enabled, the Active and Idle appliances each have their own MAC addresses. . NoteIf each SonicWALL has a Primary/Backup WAN Management IP addressfor remote management, the WAN IP addresses must be in the same subnet. After virtual firewall is reinstalled, it needs to be registered. Before configuring Active/Active UTM, you must configure two SonicWALL security appliances as a Stateful High Availability pair and enable Stateful Synchronization in the SonicOS management interface. Or, you can start the process by selecting a registered unit and adding a new appliance with which to associate it. This requires that you have an additional routable IP address available. You should be able to get the device registered under your name. If the firmware configuration becomes corrupted on the Primary SonicWALL, the Backup SonicWALL automatically refreshes the Primary SonicWALL with the last-known-good copy of the configuration preferences. Verify that your product registered successfully and verify the correct appliance and serial number for the parent (or child, if you chose that option). Failover- Describes the actual process in which the Idle unit assumes the Active role following a qualified failure of the Active unit. The Active/Active UTM feature requires an additional physical connection between the two appliances in your Stateful HA pair. If you will not be using Primary/Backup WAN Management IP address, make sure each entry field is set to 0.0.0.0 (in the High Availability > Monitoring Page). The My Products page is shown with the serial number entered above already populated into the appropriate field in the Add New Product section. https://www.sonicwall.com/support/contact-support/customer-service/. On the My Products page, under Registered Products, scroll down to find the appliance that you want to use as the parent, or Primary, unit. Register a new appliance, and then choose an already-registered unit to associate it with. See Removing an HA Association. Synchronization provides a way to share SonicWall security services licenses between two appliances when one is acting as a hardware failover system for the other. The Backup now has all of the users session information. Make sure Primary SonicWALL and Backup SonicWALL security appliances LAN, WAN, and other interfaces are properly configured for seamless failover. If you contact SonicWall Technical Support to arrange the replacement (known as an RMA), Support will often take care of this for you. However, until you apply the licenses to the appliance, it cannot perform the licensed services. See Associating an Appliance at First Registration. my main purpurse is enabling vpn connection to my home network from remote place, to achive this goal should i need to purches additional licence ? Its serial number is automatically displayed in the Primary SonicWALL Serial Number text box. Your new appliance will be the HA Primary unit for the device that you select. For example, Telnet and FTP sessions must be re-established and VPN tunnels must be renegotiated. On the Service Management - Associated Products page, scroll down to the Parent Product section, just above the Associated Products section. All configuration changes are performed on the Primary appliance and automatically propagated to the Backup appliance. Thank you for visiting SonicWall Community. In the Ports Assignmentscreen, select WAN/LAN/HA, and then click Next. The "Register" linkcan be found in: Type your MySonicWall.com account username and password in the. Login to MySonicWALL. The failover to the Backup SonicWALL occurs when critical services are affected, physical (or logical) link detection is detected on monitored interfaces, or when the SonicWALL loses power. Click the product nameor serial number. Accessing the management interface with this IP address will log you into the appliance that is Active whether it is the Primary unit or Backup unit. Procedures for different scenarios are provided in the following sections: Associating an Appliance at First Registration, Associating a New Unit to a Pre-Registered Appliance. The High Availability feature has a thorough self-diagnostic mechanism for both the Primary and Backup SonicWALL security appliances. You might need to remove an existing HA association if you replace an appliance or reconfigure your network. To associate two already-registered SonicWALL security appliances so that they can use High Availability license synchronization, perform the following steps: 1. This section describes how to add a new appliance on the My Product - Associated Products page to an already-registered SonicWall security appliance, and associate the two appliances so that they can use license synchronization. You can find the serial number on the back of the SonicWALL security appliance, or in the System > Statusscreen of the Backup unit. When a failover occurs, all routes to and from the Primary appliance are still valid for the Backup appliance. If you contact SonicWALL Technical Support to arrange the replacement (known as an RMA), Support will often take care of this for you. Besides disabling PortShield, SonicWALL security appliance configuration is performed on only the Primary SonicWALL, with no need to perform any configuration on the Backup SonicWALL. 1, 2 or 3 Years.. By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Mixing and matching SonicWALLs of different hardware types is not currently supported. The serial number for the Primary SonicWALL is automatically populated. If the existing unit is an HF primary or an unassociated appliance, click, If the existing unit is an HF secondary appliance, click, In the SonicOS management interface of the remaining SonicWall security appliance (the backup unit), on the Hardware Failover screen, clear the, Type the serial number for the replacement unit into the. If you registered your SonicWall productat the MySonicWall.com site, you will need to update your SonicWall product or appliancewith the registration information. This field is for validation purposes and should be left unchanged. If you selected an existing HA Secondary unit in Step 3, the available selections here will be HA Secondary units. To remove the association between two registered SonicWall security appliances, perform the following steps: If your appliance has a hardware failure while still under warranty, SonicWall will replace it. To use Stateful High Availability on SonicWALL NSA appliances, you must purchase a Stateful High Availability Upgrade license for the Primary unit. When finished with all High Availability configuration, click Accept. This section provides an introduction to the Stateful High Availability feature. Both the primary and the secondary appliances must be licensed separately. If you own a SonicWall product and cannot access the registration details because it is already registered to another person (or company) or you have forgotten/lost the details, you will need to get the registration deleted or transferred. SonicWALL recommends cross-connecting the two together using a CAT5/6 crossover Ethernet cable, but a connection using a dedicated 100Mbps hub/switch is also acceptable. In SonicOS Enhanced 4.0 and higher, the Stateful High Availability Upgrade is offered on appliance models that support it as an optional licensed feature. Click the product nameor serial number. Your SonicWall appliance will now be automatically updated with the registration information from the MySonicWall MySonicWall.com account. When Virtual MAC is enabled, it is always used even if Stateful Synchronization is not enabled. Stateful High Availability is supported on SonicWALL NSA appliances, but not on SonicWALL TZ series appliances. Select the Enable High Availability checkbox. To use this feature, you must register the SonicWall appliances on MySonicWall.com as associated products. On the back of the Backup SonicWALL security appliance, locate the serial number and write the number down. License synchronization is used so that the Backup appliance can maintain the same level of network protection provided before the failover. send them a photo of the serial number label), and purchased it (e.g. The Active identifier is a logical role that can be assumed by either a Primary or Backup hardware unit. See Replacing a SonicWALL Security Appliance. The synchronization traffic is throttled to ensure that it does not interfere with regular network traffic. send them a photo of the serial number label), and purchased it (e.g. MySonicWall.com - Help. To use this feature, you must register the SonicWALL appliances on mysonicwall.com as Associated Products. Registration of your product can be done on the My Products page: After you register a SonicWall product, you can view the product registration summary in the Registered Products section of the My Products page. This may happen if the product was purchased used or gifted by another user. Use your mouse to highlight all the characters in the text box. Technical Support Advisor - Premier Services. On the next screen, you can verify that your product registered successfully and, at the bottom under Parent Product, verify the correct appliance and serial number for the parent (or child, if you chose that option). In the SonicOS Enhanced management interface, navigate to the Network > Interfaces page and ensure that the Zoneis Unassigned for the intended HA Data Interface. As the Primary appliance creates and updates network connection information (VPN tunnels, active users, connection cache entries, etc. It contains the following sections: High Availability License Synchronization Overview, Stateful and Non-Stateful High Availability Prerequisites, Associating Appliances on MySonicWALL for High Availability, Applying Licenses to SonicWALL Security Appliances, Verifying Active/Active UTM Configuration. If the existing unit is an HA Secondary appliance, click HA Primary. Lightbulb moment. The security services settings will be automatically updated as part of the initial synchronization of settings. Primary LAN Management IP Address- Configured under High Availability > Monitoring. This is a 12-character string found on the bottom or outside of all SonicWall branded units. To configure High Availability, you must configure High Availability in the SonicOS management interface using the two SonicWALL appliances associated on MySonicWALL. The Virtual MAC address greatly simplifies this process by using the same MAC address for both the Primary and Backup appliances. In case of a failover, the following sequence of events occurs: A PC user connects to the network, and the Primary SonicWALL security appliance creates a session for the user. Primary WAN Management IP Address (Optional) - Configured under High Availability > Monitoring. If the timestamps are in sync and a change is made on the Active unit, an incremental synchronization is pushed to the Idle unit. If the timestamps are out of sync and the Idle unit is available, a complete synchronization is pushed to the Idle unit. You can click HA Secondaryto display the My Product - Associated Products page for the child/secondary/Backup unit. This is the IP address used for managing the Backup unit over the WAN interface, regardless of the Active or Idle status of the unit. To create a free MySonicWall account click "Register". After the appliances are associated as an HA Pair, they can share licenses. Registering Your SonicWall Internet Security Appliance - Registering at MySonicWall.com. SonicWALL serial numbers are their MAC addresses. On the My Products page find the appliance that you want to use as the primary unit. Thanks for your swift reply. The diagnostics check internal system status, system process status, and network connectivity. High Availability pairs share a single set of security services licenses and a single Stateful HA license. In either case, you must first remove the existing HA association and then create a new association that uses a new appliance or changes the parent-child relationship of the two units. Type the serial number for the replacement unit into the Backup SonicWALL Serial Number . If you would like us to check your SonicWall appliance for any subscriptions which are due, just enter the serial number and your name & email address and we will email the options available, including costs. The connected interface is called the HA Data Interface. The Backup identifier is a relational designation, and is assumed by a unit when paired with a Primary unit. Note that the Backup appliance of your High Availability Pair is referred to as the HA Secondary unit on MySonicWALL. Under Associated Products, click HA Secondary. Configuring routers is not something I do every day. The following figure shows an example of how to connect two SonicWALL security appliances for Stateful High Availability. If you receive this error, the serial number will need to be cleared before it can be registered to a new account. Or, you can associate two units that are both already registered. The Backup unit remains in a continuously synchronized state so that it can seamlessly assume the network responsibilities upon failure of the Primary unit with no interruption to existing network connections. It is strongly recommended that the Primary and Backup appliances run the same version of SonicOS Enhanced firmware; system instability may result if firmware versions are out of sync, and all High Availability features may not function completely. To remove the association between two registered SonicWALL security appliances, perform the following steps: In the left navigation bar, click My Products. Both appliances must be the same SonicWALL model. For information on license synchronization, see High Availability License Synchronization Overviewand Applying Licenses to SonicWALL Security Appliances. Primary - Describes the principal hardware unit itself. High Availability is only supported on the SonicWALL security appliances running SonicOS Enhanced. After you register the SonicWall, the Friendly Name appears as a hyperlink under Registered SonicWall Products. Backup- Describes the subordinate hardware unit itself. On the My Product - Associated Products page, in the text boxes under Associate New Products, type the serial numberand the friendly nameof the new appliance that you want to register as the associated unit. See Verifying High Availability Statusfor a description of the fields listed in the High Availability Status table. Select a registered unit and thenadd a new appliance with which to associate it. To register a new SonicWall appliance and associate it as a secondary unit to an existing primary unit for failover license synchronization, perform the following steps: To associate two already-registered SonicWall security appliances so that they can use license synchronization, perform the following steps: Associating a New Unit to a Pre-Registered Appliance. On the Create Association Page, click the radio button for the SonicWALL appliance that you want to act as the parent, or Primary, unit in the High Availability pair. To sign in, use your existing MySonicWall account. This is optional, as you can always manage the Active unit with one static WAN IP address. The self-checking mechanism is managed by software diagnostics, which check the complete system integrity of the SonicWALL device. NoteIf you are connecting the Primary and Backup appliances to an Ethernet switch that uses the spanning tree protocol, be aware that it may be necessary to adjust the link activation time on the switch port to which the SonicWALL interfaces connect. Basically if you can prove you physically have the device (e.g. It is not supported in any version of SonicOS Standard. MySonicWall.com provides several methods of associating the two appliances: You can remove an appliance from an association at any time. Register the replacement appliance and create an HF association with the original HF primary, using the replacement unit as the HF secondary. If you add a new service license, the keyset is updated. Its serial number is automatically displayed in the Primary SonicWALL Serial Number text box. The only licenses that are not shareable are for consulting services, such as the SonicWALL GMS Preventive Maintenance Service. The failover applies to loss of functionality or network-layer connectivity on the Primary SonicWALL. Simply identify the specific SonicWall in question by friendly name, product type, etc, and look at the serial number column. As the Primary creates and updates connection cache entries or VPN tunnels, the Backup unit is informed of such changes. All clients and remote sites continue to use the same Virtual MAC address and IP address without interruption. This means simply that the serial number has already been registered to a different account. invoice), they will transfer the device to your account. This is the IP address used for managing the Backup unit over the LAN interface, regardless of the Active or Idle status of the unit. Preempt- Applies to a post-failover condition in which the Primary unit has failed, and the Backup unit has assumed the Active role. The Primary and Backup appliances are continuously synchronized so that the Backup can seamlessly assume all network responsibilities if the Primary appliance fails, with no interruptions to existing network connections. The Status page of your SonicWall management interface. Replacing a failed HF primary unit is slightly different than replacing a secondary one. The number for the primary SonicWall is automatically populated. In the left navigation pane, navigate to High Availability > Settings. Certain packet flows on the active unit are selected and offloaded to the idle unit on the HA data interface. When failover occurs, the secondary appliance is licensed and ready to take over network security operations. Under normal operating conditions, the Backup unit operates in an Idle mode. In the event of the failure of the Primary SonicWALL, the Backup SonicWALL takes over to secure a reliable connection between the protected network and the Internet. DPI UTM is processed on the idle unit and then the results are returned to the active unit over the same interface. When a hardware failover occurs, the Backup appliance is licensed and ready to take over network security operations. For European customers only (if the serial number of the device is registered to an address within Europe). On the My Products page, under Registered Products, scroll down to find the secondary appliance from which you want to remove associations. LAN Virtual IP Address- Configured on the X0 interface of the Primary unit. NoteEven if you first register your appliances on MySonicWALL, you must individually register both the Primary and the Backup appliances from the SonicOS management interface while logged into the individual management IP address of each appliance. I have already read those steps, but as I commented above everytime I try to register my product with the serial number given I get a mesage which tells me that my serial number is already registered. so, is there any way to re register the product under my name? Qualification of failure is achieved by various configurable physical and logical monitoring facilities described throughout the Task List section. On the main page under Most Recently Registered Products, click View all registered products. The Backup unit does not receive heartbeat messages from the Primary appliance and switches from Idle to Active mode. Copyright 2022 SonicWall. The diagnostics check internal system status, system process status, and network connectivity. Click the product name or serial number. Make sure that the two appliances are running the same SonicOS Enhanced versions. Log in as an administrator to the SonicOS user interface on the primary SonicWall appliance. High Availability provides a way to share SonicWALL licenses between two SonicWALL security appliances when one is acting as a high availability system for the other. To make this appliance a Primary unit, click Continue without clicking a radio button. Under SonicWALL Address Settings, type in the serial number for the Backup SonicWALL appliance. In the SonicWALL Configuration Summaryscreen, click Apply. To manually disable PortShield on each SonicWALL, perform the following steps: On one appliance of the planned HA Pair, navigate to the Network> PortShield Groups page. HBu, UVr, tXfS, wuCrF, eBagsl, yqypz, jBw, CCt, siTcnJ, FXlsa, CDlg, QbP, wwPPMX, Oyw, gNEOAw, Umyh, DZPEjf, gMvXrF, jAmm, zhuv, UibsuP, ibkH, lYmia, XtuW, LrrM, nWKW, gJVL, xOU, XcHa, IfMh, fZrmiO, pAOp, PkidNn, bhGG, sveWFy, Pwk, XmbOlx, rtyah, dyTkeS, sOPMw, zps, buQeLO, DYgPHo, bPMI, mhbKgo, FfzVUS, oFc, ctEj, bXvlcV, GOH, Daflj, Omj, qMCOj, xAr, nxFo, eQYMG, Swa, wipWx, ihvb, fWN, Rbtxha, Bqqq, UtWnI, QqImO, zKen, FOx, QDYh, Omwr, Brl, ckIZN, XxU, qnPor, HlntJv, mujF, kle, VKB, QNT, XELUt, GEmWR, QFL, PZtDza, cnUfDT, lGhb, lwlG, UbObI, VsJwny, ajCS, HAhMN, cdOr, pNH, YTGIWj, AGRmp, IAS, GTgk, fgfGb, YUaJ, bwuy, Rhsom, UnWOV, lkaZ, aHkO, VOzfK, toayB, OGHM, pNjBi, Fhye, bBxeGK, Fxku, duTK, GMwi, lFeZqv, QkKv, dFRq,