Simplified HA Device Configuration in SD-WAN
Focus
Focus
What's New in the NetSec Platform

Simplified HA Device Configuration in SD-WAN

Table of Contents

Simplified HA Device Configuration in SD-WAN

Add and configure HA device pairs in SD-WAN simultaneously, ensuring configuration consistency and simplifying management of high availability firewalls.
When adding a device in high availability (HA) to SD-WAN Devices, you now have the option to add its HA peer simultaneously. This feature streamlines configuration by enabling you to configure both devices from a single configuration page, ensuring configuration consistency between the active and passive devices. When selected, the system identifies the HA peer and displays the device name, prompting you to specify a site name for the peer. Both devices are then created with matching configurations, which is critical since SD-WAN configurations between HA pairs should be identical except for site names.
Prior to this enhancement, you needed to add each device in an HA pair separately to SD-WAN Devices, which could lead to configuration mismatches. The system would display warnings when such mismatches were detected, but the manual correction process was error-prone.
With this feature, any configuration changes made to one device automatically propagate to its peer, maintaining synchronization between the devices. This feature is useful when adding devices to VPN clusters, as SD-WAN requires both HA peers to have matching configurations for proper functioning during failover events.
If you attempt to configure HA devices separately, the SD-WAN plugin will prevent this operation and guide you to add HA pairs instead. This safeguard, along with visual indicators that alert you to any configuration mismatches between HA pairs, helps maintain the integrity of your SD-WAN deployment and ensures proper failover functionality in your high availability environment.