https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-avoid-split-brain-in-active-passive-cluster/m-p/508315#M206 <P>Check the Preemptive and have the Active have lower priority than the passive FW.&nbsp;</P> Fri, 08 Jul 2022 11:30:13 GMT S_Alad 2022-07-08T11:30:13Z https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-avoid-split-brain-in-active-passive-cluster/m-p/508309#M205 <P>Hi,</P> <P>&nbsp;</P> <P>We've got a installation with active-passive devices in different datacenters. We need to ensure that the primary device is always the active device when there is some problem between datacenters.</P> <P>&nbsp;</P> <P>We have configured virtual router path monitoring in the secondary device so it can check that the primary device is not reachable. But for some reason it does not work, and both devices get acitve status.</P> <P>&nbsp;</P> <P>How can we avoid it?</P> <P>&nbsp;</P> <P>Regards.</P> Fri, 08 Jul 2022 09:15:03 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-avoid-split-brain-in-active-passive-cluster/m-p/508309#M205 JokinLete 2022-07-08T09:15:03Z https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-avoid-split-brain-in-active-passive-cluster/m-p/508315#M206 <P>Check the Preemptive and have the Active have lower priority than the passive FW.&nbsp;</P> Fri, 08 Jul 2022 11:30:13 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-avoid-split-brain-in-active-passive-cluster/m-p/508315#M206 S_Alad 2022-07-08T11:30:13Z