Is it possible to use a DataPlane interface on a Passive Palo Alto Networks Firewall to connect with Panorama?

Is it possible to use a DataPlane interface on a Passive Palo Alto Networks Firewall to connect with Panorama?

356
Created On 07/20/22 22:13 PM - Last Modified 11/15/25 00:21 AM


Question


Is it possible to use a DataPlane interface  on a Passive Palo Alto Networks Firewall to connect with Panorama?

Environment


  • Any Panorama.
  • Any Palo Alto Networks Firewall on High Availability Passive Mode.
  • Any PAN OS.

Answer


No, by design interfaces on passive Palo Alto Networks Firewall do not pass traffic. On this scenario there are two options:
  • Use management interface.
  • Both Palo Alto Networks firewalls on Active - Active mode.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqgECAS&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail