topic Re: SD-WAN Licensing in HA Pair in Advanced SD-WAN for NGFW Discussions

SD-WAN Licensing in HA Pair

mR00t_s5 — Fri, 07 Nov 2025 12:39:36 GMT

Hi,

Does the SD-WAN license apply to each FW individually or to the HA Pair?

We are deploying PA410s in out branches. This FWs will be in HA A/P mode and with SD-WAN managed from Panorama.
I was wondering whether we have to adquiere 2 SD-WAN licenses (one per Firewall) or just 1 per HA Pair.

Thanks!

Re: SD-WAN Licensing in HA Pair

PavelK — Sun, 09 Nov 2025 21:33:59 GMT

Hello @mR00t_s5

thanks for post!

Across all Palo Alto subscription types there is a SKU convention that can end either with "HA2" or "HA2-R". HA2 is for initial subscription purchase for Firewalls in HA pair and HA2-R is for renewal of the same license. For PA-410 SD-WAN subscription in HA pair you would be ordering 2x PAN-PA-410-SDWAN-HA2. You still have to buy two subscriptions, one for each device in HA pair. HA2 SKU is typically cheaper than ordering non-HA subscription for each Firewall.

To get accurate ordering information and discount options please reach out to your reseller.

Kind Regards

Pavel

Re: SD-WAN Licensing in HA Pair

mR00t_s5 — Mon, 10 Nov 2025 11:48:28 GMT

Thanks!!