![]() One or more of the firewall’s designated destinations cannot be accessed ![]() The firewall is not responding to the heartbeats of polls One or more of the monitored interfaces fails The following are the situations that cause a failover: Both HA peers should be running the same version of PAN-OS.Ī failover happens when one of the firewalls in a HA pair fails and the peer firewall takes up the responsibility of safeguarding traffic. You can create a HA pair by connecting two Palo Alto Networks firewalls. To synchronize data - network, object, and policy configurations - and retain state information, the firewalls in a HA pair employ dedicated or in-band HA ports on the firewall.įirewall-specific settings, such as management interface IP addresses or administrator profiles, HA-specific configuration, log data, and ACC information are not exchanged across peers. Using two firewalls in a high-availability pair offers redundancy and ensures business continuity.īy ensuring that an alternate firewall is accessible if the peer firewall fails, you may reduce downtime. ![]() In case one of the firewall peers goes down, a heartbeat link between the peers provides smooth failover. High availability (HA) is a setup in which two firewalls are grouped together and their configurations are synchronized to prevent your network from having a single point of failure. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |