Does Link and Path Monitoring run on the Passive Firewall?
13013
Created On 04/21/22 02:18 AM - Last Modified 11/17/22 03:28 AM
Question
Does link monitoring run on the passive unit in Active/Passive High-Availability?
Does path monitoring run on the passive unit in Active/Passive High-Availability?
Environment
- Palo Alto Firewalls
- High Availability (HA)
- Active/Passive HA
Answer
- Link monitoring and path monitoring runs on both active and passive unit.
- The passive unit needs to transition to non-functional state when failure condition is detected, to prevent it to transition to the active state when the previous active unit fails.
- Once the failure condition is cleared, then the unit transitions to passive state.
Additional Information
Define HA Failover Conditions
HA Firewall States