How to configure proxy HA and transparent router in 8.2 using haproxy (mfend replacement)?

[mkutrieba]

See below answer!

[mkutrieba · Accepted solution]

We created 2 best practice articles containing only example configs with IP addresses (interfaces, scanner table, VIP, VRRP, HTTP/FTP listener + hastats output):
https://community.mcafee.com/t5/Documents/Example-Transparent-Proxy-configuration-using-HAProxy-mfen...

https://community.mcafee.com/t5/Documents/Example-Proxy-HA-configuration-using-HAProxy-mfend-replace...

[jround]

Thank you for these articles, although it may be useful had a warning popped up prior to upgrade to say we would have had to make these changes now that v8 seems to have been pushed through as a main release (so checking for updates today bumped us up from v7.8 to v8.2.5), it took me a good bit of head scratching as to why VIP wouldn't come back up until I stumbled on this thread 🙂

[aloksard]

Hi,

Hope you are doing well.

Yes your point is totally valid.

It is always recommended to go through release notes of a version prior to performing upgrade for that version.

Release notes does have the information about the changes related to HA. Release notes have information on what changes are their in version and what issues have been fixed.

Regards

Alok Sarda

[mkutrieba]

@jround 

Yes, fully understand this and agree that there could be a warning/info directly in the product, but also have to agree with Alok. Release notes contain all information about the mfend replacement and the changes that are mandatory.
I think SNS was also sent out multiple times. In case you do not know about SNS, please subscribe here:
https://www.mcafee.com/enterprise/en-us/sns/preferences/sns-form.html

If you have further questions, please let us know 🙂

Stay all healthy!