Checking High Availability Status 147If the backup Firewall has taken over for the primary, for example, in theevent of a failure to the primary Firewall, the first line in the statuswindow indicates that the backup Firewall is currently Active.Check the status of the backup Firewall by logging into the LAN IPAddress of the backup Firewall. If the primary Firewall is operatingnormally, the status window will indicate that the backup Firewall iscurrently Idle. If the backup has taken over for the primary, this windowwill indicate that the backup is currently Active.In the event of a failure in the primary Firewall, you may access the Webinterface of the backup Firewall at the primary Firewall’s LAN IP Addressor at the backup Firewall’s LAN IP Address. The primary Firewall will notbe accessible until the primary Firewall has become Active again.E-Mail AlertsIndicating StatusChangeIf you have configured the primary Firewall to send e-mail alerts, you willreceive an alert e-mail when there is a change in the status of the HighAvailability pair. For example, when the backup Firewall takes over fromthe primary after a failure, an e-mail alert will be sent indicating that thebackup has transitioned from Idle to Active. If the primary Firewallsubsequently resumes operation after that failure, and Preempt Mode hasbeen enabled, the primary Firewall will take over and another E-mail alertwill be sent to the administrator indicating that the primary haspreempted the backup.View Log The Firewall also maintains an event log that displays these HighAvailability events in addition to other status messages and possiblesecurity threats. This log may be viewed with a browser using the FirewallWeb interface or it may be automatically sent to the administrator’se-mail address.To view the Firewall log, click the Log button on the left side of thebrowser window and then click on the View Log tab at the top of thewindow. A window similar to the following will be displayed.DUA1611-0AAA02.book Page 147 Thursday, August 2, 2001 4:01 PM
