topic HA Implementation using existing device with autofocus license in Next-Generation Firewall Discussions

HA Implementation using existing device with autofocus license

Arjohn — Mon, 17 Apr 2023 01:55:58 GMT

Scenario:
Client wants to implement HA setup. Currently have 1 exisiting device.

Problem:
Autofocus license is still active in the exisitng device. No more sku for autofocus license as it is already eos since September 2022.

Question:
Will the HA work if the existing device have the autofocus license and the new ha pair device have the aiops license which is the replacement for the old autofocus license?

Re: HA Implementation using existing device with autofocus license

LAYER_8 — Fri, 01 Dec 2023 02:15:38 GMT

Why not just delete the autofocus license? The portal is just about useless anyway. Make active NGFW the AIOps one. In theory it's not guaranteed but I've seen it work in prod, you just lose out on AIOps content during failover, not a huge miss, IMO

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/set-up-activepassive-ha/prerequisites-for-activepassive-ha#:~:text=For%20high%20availability%20on%20Palo,IP%20addresses%20within%20specific%20parameters.