[FAQ] Firewall High Availability [HA Pro] - Questions and Answers

Network reliability is essential in today’s 24/7 business landscape. Zyxel’s Device HA Pro ensures minimal downtime and smooth recovery to maintain stable operations, delivering an effective high-availability (HA) solution with robust management tools.

Advantages

Streamlined Deployment with a Dedicated Link - Active/active configurations traditionally required reserving system resources and mastering complex routing concepts. Device HA Pro simplifies this with an active/passive mode, allowing seamless failover without complex setup. The passive device maintains network readiness and synchronization, using a dedicated port connection to back up settings and minimize downtime.

Instant Failover Response - Device HA Pro’s rapid failover is designed for near-invisible transitions. Within five seconds, the passive device takes over seamlessly during failures, such as connectivity issues or heartbeat signal loss. The active/passive role switch happens only when necessary, preserving network continuity with minimal disruption.

With Zyxel Device HA Pro, businesses achieve resilient, easy-to-manage network stability for uninterrupted operations.

Licensing

Question: Do I need two licenses (e.g., UTM licenses) when using Device HA Pro?

Answer: No, only one license is required with Device HA Pro. If the active firewall fails, the passive firewall will automatically inherit the licenses.

Troubleshooting License Status Issues: Ensure the primary device’s serial number is entered under "Serial number of the licensed device for license synchronization" in Device HA Pro settings. This step is crucial for transferring the license to the active device.

After licenses are transferred to the primary device, the secondary device only has a trial license. You can log in to myZyxel.com to check the license status of each device. 

Note: The default one-year Gold Security Pack on ATP gateways is non-transferable. Please contact Zyxel Support in your region for assistance with HAPro license transfers.

How do you contact the Support Team for a License Transfer? Please check here: How do you contact the Support Team?

How to deploy Zyxel HAPRO

How to Setup Device HA you can find here: Firewall High Availability [HA Pro] - Configure Device HA Pro

Setup Assistance: are you looking for configuration assistance from our Professional Services Team? Please check here: Zyxel ConfigService Security.

How to redeploy Zyxel HAPRO

How to redeploy Device HA you can find here: Firewall High Availability [HA Pro] - Device HA Pro redeploy

How to replace a defective/broken device in HA Pro

How to redeploy Device HA you can find here: Firewall High Availability [HA Pro] - How to replace a defect device in HA Pro

How to Update Devices in Zyxel HAPRO Mode

How to Setup Device HA you can find here: Firewall High Availability [HA Pro] - Firmware Upgrade/Update hang or stuck with loading

Firmware Upgrade/Update

 

Frequently Asked Questions

  • How to access a slave device when you use Device HA

To access the slave device, you must access the Management IP you set up on the Device HA pro page.

  • HA PRO on FLEX H SERIES?

The Device HA feature will be implemented for USG Flex H Series models until Q4 2025 (please check with tech support for the exact date).

  • Is HA Pro supported in Nebula?

Currently, Nebula does not support Device High Availability (HA) in Nebula mode. If you wish to implement device HA, we recommend switching to on-premise mode and following the instructions provided in this guide:

  • Can I use different models for HAPRO? 

The devices must be of the same series and model and registered in the same myZyxel.com account.

  • Can I unpair devices in MyZyxel if using HA Pro?

You can reset one of the paired devices to default (passive is better) and re-sync status to the MyZyxel via Reboot or "Resync" Button in the device Web interface. The paired devices will back to unpaired status as standalone mode.

 

Articles in this section

Was this article helpful?
0 out of 0 found this helpful
Share