https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/aws-gwlb-target-failover-setting/m-p/1225749#M2354 <P>&nbsp;</P> <P>Somewhat of a silly question.&nbsp; Have a GWLB configured with 2 vm-series firewalls as targets (1 fw in us-east-1a and the other in us-east-1b).&nbsp;&nbsp;</P> <P>&nbsp;</P> <P>Under the target group configuration, there is a recommended setting to be enabled for Target Failover (screenshot below)</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="securehops_0-1743794822128.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/66973i74AC0C32926E8BFB/image-size/medium?v=v2&amp;px=400" role="button" title="securehops_0-1743794822128.png" alt="securehops_0-1743794822128.png" /></span></P> <P>&nbsp;</P> <P>Would I be correct in saying the only way to enable this option and have it work is to setup ElastiCache, as described in this article?&nbsp;&nbsp;<A href="https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/vm-series-integration-with-gateway-load-balancer/enable-session-resiliency-on-vm-series-for-aws" target="_blank">https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/vm-series-integration-with-gateway-load-balancer/enable-session-resiliency-on-vm-series-for-aws</A></P> <P>&nbsp;</P> <P>If so, can it be enabled after deployment?&nbsp; The guide above discusses more of an initial setup.&nbsp; These vm-series are already in production</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 04 Apr 2025 19:44:59 GMT securehops 2025-04-04T19:44:59Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/aws-gwlb-target-failover-setting/m-p/1225749#M2354 <P>&nbsp;</P> <P>Somewhat of a silly question.&nbsp; Have a GWLB configured with 2 vm-series firewalls as targets (1 fw in us-east-1a and the other in us-east-1b).&nbsp;&nbsp;</P> <P>&nbsp;</P> <P>Under the target group configuration, there is a recommended setting to be enabled for Target Failover (screenshot below)</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="securehops_0-1743794822128.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/66973i74AC0C32926E8BFB/image-size/medium?v=v2&amp;px=400" role="button" title="securehops_0-1743794822128.png" alt="securehops_0-1743794822128.png" /></span></P> <P>&nbsp;</P> <P>Would I be correct in saying the only way to enable this option and have it work is to setup ElastiCache, as described in this article?&nbsp;&nbsp;<A href="https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/vm-series-integration-with-gateway-load-balancer/enable-session-resiliency-on-vm-series-for-aws" target="_blank">https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/vm-series-integration-with-gateway-load-balancer/enable-session-resiliency-on-vm-series-for-aws</A></P> <P>&nbsp;</P> <P>If so, can it be enabled after deployment?&nbsp; The guide above discusses more of an initial setup.&nbsp; These vm-series are already in production</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 04 Apr 2025 19:44:59 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/aws-gwlb-target-failover-setting/m-p/1225749#M2354 securehops 2025-04-04T19:44:59Z