Which Sessions Will Sync Between High Availability Peers?
Environment
Palo Alto Firewall.
PAN-OS 8.1 and above.
HA (High Availability) Configuration.
Answer
In High Availability (HA) configuration, all the sessions in the session tables are synchronized with the following exceptions:
In Active/Passive mode, ICMP and host sessions are not synchronized between peers.
In Active/Active mode, host session, multicast session, or BFD session information are not synchronized.
Note: A host session is a session terminated on one of the firewall interfaces, such as an ICMP session pinging one of the firewall interfaces or a GP tunnel.