Up
Previous Next

Sheriff CSM™

Disabling High Availability

About Disabling HA in Network Nodes

You must disable HA components in the following order:

Sheriff CSM Standard	Sheriff CSM Enterprise
1. Server pair	1. Server pair
2. Sensor (Deputy) pair	2. Database pair
	3. Sensor pair

About Disabling HA in Components Not Configured for It

If you have any Sheriff CSM Standard or Enterprise Sensors that you did not configure for HA, you must still run the HA disablement command on them after you disable HA in the Sheriff CSM Standard or Enterprise Server pair. This removes any firewall rules created when HA was configured.

Important: If you fail to do this, you can introduce a vulnerability into the network.

Disabling HA in a Failover Pair

To disable HA in a failover pair

1. Log into the secondary (slave) node and launch the Sheriff console.

2. In the Sheriff Setup Main menu, select Jailbreak System, press Enter (<OK>), then Enter (<Yes>) again.

3. From the command line prompt, disable HA:

   sheriff-ha-assistant -d

4. Exit the command line mode:

   exit

5. In the primary (master) node, repeat steps 1. through 4.

6. Exit the command line mode:

   exit

7. Repeat the foregoing steps for all of the component pairs in your HA deployment the previously mentioned order.