Alright I have to chime in here because every time there is a thread like this (I've been searching) William and others jump all over the OP with irrelevant statements about Windows instead of answering the question. This is a perfectly valid need, and one we share for a number of reasons, many of which having to do with the sorry state of MANY things in 9.x that are still broken... A big one for us is that: 1) by design (for some strange reason) static routes for a particular interface do not get invalidated if that interface goes down, which leads us to 2) using multipath instead of static routes to handle sending certain traffic over certain WAN connections, which would be fine but unfortunately 3) multipath rules, once invalidated due to a failover, never fail back into the desired state even when the failed interface comes back... like ever. weeks after a failover event (even one that just lasts moments) the multipath rule will still be completely ignored and the traffic will continue to flow over the wrong interface Sophos support has been completely useless as far as solutions to this go, so our only option for our hundreds of SGs is to turn to scheduling some kind of periodic reboot so that the multipath rules reset to the way they should be. Honestly it's completely absurd that this kind of thing can't be done and done easily via SUM.
↧