Hi Bob, sorry to resurrect an older thread but we are still battling this and have never gotten anywhere with Sophos support who no longer really seem to know their own product - it's always guesswork and "hey let's see what this does!" :-( We ended up moving away from availability groups and using multipath for all our load balancing and failover configuration because AGs had a strange issue where they would not fail over if the interface was in an "error" state but not down. Very frustrating. Equally or perhaps even more frustrating is the fact that multipath rules don't seem to have any proper mechanism for failback!! So if I have an interface go down (or at least have the UTM think it goes down) even just briefly so that its multipath rules fail over to the other interface, once it's back online there's no mechanism for things to fail back to their intended home. So we end up in a scenario where we think all of our voip and vpn traffic is going over one interface, but it's actually been running over the backup line for who knows how long. How can we periodically force things back in line with the multipath config? Is there any option to do so other than rebooting the UTM? If not, is there a straightforward way to scheduling a reboot (and one that handles HA pairs so the failed over state doesn't persist)? Thanks!
↧