Does Link and Path Monitoring run on the Passive Firewall?

Does Link and Path Monitoring run on the Passive Firewall?

13015
Created On 04/21/22 02:18 AM - Last Modified 11/17/22 03:28 AM


Question


Does link monitoring run on the passive unit in Active/Passive High-Availability?
Does path monitoring run on the passive unit in Active/Passive High-Availability?


Environment


  • Palo Alto Firewalls
  • High Availability (HA)
  • Active/Passive HA


Answer


  1. Link monitoring and path monitoring runs on both active and passive unit.
  2. The passive unit needs to transition to non-functional state when failure condition is detected, to prevent it to transition to the active state when the previous active unit fails.
  3. Once the failure condition is cleared, then the unit transitions to passive state.


Additional Information


Define HA Failover Conditions
HA Firewall States


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004ODDCA2&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language