Should interfaces on PAN standby unit be in a down state normally?
When using Active-Standby HA on an Palo Alto networks firewall, is it expected that the traffic interfaces (inside, outside) on the standby unit should be in a configured and down state until it becomes the active node? In contrast the Cisco ASA secondary unit has their interfaces up and have an IP address.
Last Comment
kevinhsieh
Are you running multiple switches? If you want fast failover, the interfaces on the standby switch need to be up. My failvoer takes places in usually less than a second for a planned failover.
ASKER
It's Nexus 9K pair configured in a VPC.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Hardware Firewalls
Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.
25K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
