Avatar of king daddy
king daddy
Flag for United States of America asked on

two sonicwalls / firewalls for failover, but not HA

Greetings,

I have a sonicwall 240. they have been discontinued. can't find a 240 HA unit. can't afford a new 220 plus a 220 HA unit.

Is there a way to install another sonicwall (NSA 220, TZ model, etc.) into production with the 240 for a make-shift HA set up? Essentially, two firewalls set up with the same rules so if one goes down the other takes over, even if it is a manual failover by setting up a remote connection to each firewall and failing over as needed.

thanks
NetworkingHardware FirewallsVirtualization

Avatar of undefined
Last Comment
king daddy

8/22/2022 - Mon
SOLUTION
rharland2009

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
Ugo Mena

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
king daddy

ASKER
thanks. I am going to check this out further.
Ugo Mena

If you want to place both firewalls into active mode on your network, then you should make sure all of your machines are getting IPs assigned statically and then set both default gateways in the Advanced TCP/IP settings, adding manual Metric's for both.

TCP/IP by default automatically calculates an interface metric that is based on the speed of the interface. The interface metric becomes the metric of the default route in the routing table for the configured default gateway. The second default gateway should be used when the first is unavailable.
ASKER CERTIFIED SOLUTION
Carl Dula

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
king daddy

ASKER
I only saw one 240 on eBay and it was about $1700. If you saw several, can you send a link to your eBay search or your search terms? I'm unable to see but that one.

I think I'm going to get approval to go about $500 over budget and get an NSA 220, an NSA 220 HA unit, and the HA license. Got a quote for $2175. That'll match what I have at the data center.

Thanks all
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
Carl Dula

On ebay search nsa240.

Your quote seems high for the two NSA220's. Take a look on www.sonicguard.com
king daddy

ASKER
Sonicguard.com ended up being more expensive based on their website.

Actually found a good one on eBay with support, services, and warranty through 04/2014 verified through SonicWall as the serial number was posted on eBay, which I then relayed to SonicWall for verification. Thanks for the search tip. I didn't look thoroughly enough when I first searched.

Thanks all for your help.