PA VM - Active/Passive on Azure availability set

narendra_ghuge — Tue, 20 Oct 2020 08:15:58 GMT

I have few firewalls in active/Passive HA and few more to built. I'm not using Loadbalancer / App gateway to load blance traffic between firewalls.

Can I use availability set and place the HA members on respective fault and update domain.

ex FW1 Update domain :0 Fault domain: 0

FW2 Update domain :1 Fault domain: 1

Couldn't find any document for this.

Does this scenario support high availability?

Re: PA VM - Active/Passive on Azure availability set

Ravindra692 — Wed, 28 Oct 2020 13:19:46 GMT

In an active Passive scenario you do not need a Load Balancer.

For the Active/Standby Scenario this is what I did

1. Deploy the Azure VM's in a availability set

2. Do the HA app registration with the Azure AD and then make sure this App registration has the Subscription contributor roles assigned to it for the subscription where the Palos are deployed

3. if the palo VM's are going to have Public IP's associated with the NIC then make sure you use the basic SKU for those Public IP's

Doing these I got the active/standby situation working for me, however the failover time it takes 6-8 mins in the least.

topic PA VM - Active/Passive on Azure availability set in VM-Series in the Public Cloud

PA VM - Active/Passive on Azure availability set

Re: PA VM - Active/Passive on Azure availability set