I have tz670 installed in my network. I would like to ask in case of this failure how can I be able to configure the other with same model to work as passive device to avoid intruption in my network. Please help
Category: Entry Level Firewalls
Reply 0
Answers
@alijan125 this KB article answers all questions:
https://www.sonicwall.com/support/knowledge-base/high-availability-ha-faq/221221101825107
Long story short, just get a TZ 670 HA unit (different SKU, no license needed) and do the exact cabling for the 2nd unit. Add the S/N of the secondary unit in the HA configuration and you are done (additional steps can be necessary).
Optionally you can buy a stateful HA license for your primary unit, this makes the failover a bit smoother.
—Michael@BWC
If you only have one LAN switch then that becomes a single point of failure, so you could add another switch.