Would be nice to have an HA-Management-Network-Port to access passiv-Firewall by web, ssh etc.
Ulrich Weber commented
You can also create additionl addresses on the internal interface and assign each additional to a dedicated node.
This way, you can directly access each node with a different additional address.
Scott Klassen commented
The ***** can be accessed from shell through the master. See ha_utils SSH @ http://www.sophos.com/en-us/support/knowledgebase/2450/2500/3650/115616.aspx