Is the High availability Supported between two different Firewall Platforms?

Is the High availability Supported between two different Firewall Platforms?

78804
Created On 09/26/18 13:50 PM - Last Modified 10/18/23 01:24 AM


Question


Is the High availability  Supported between two different Firewall Platforms?

Environment


  • Palo Alto Firewalls
  • PAN-OS 9.1 and above
  • High Availability (HA) configuration


Answer


  1. Palo Alto Networks devices only support high-availability between 2 identical devices.
  2. If different Palo Alto models are connected in the same HA Pair, Error message is displayed and the device goes to suspended state
HA Group 1: Peer device platform model not matching; going to Suspended state.
  1. Refer to the "Prerequisites for Active/Passive HA " for details

 

 

 



Additional Information


  • If HA1 is connected between two different platforms, both nodes will go into a suspend state. To recover, disconnect the HA1 interface and reboot the device.
  • Refer also: High availability resources


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000Clrs&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkcSArticleDetail

Choose Language