topic Re: Preempt behaviour in HA in Next-Generation Firewall Discussions

Preempt behaviour in HA

vishalrsshah — Thu, 11 Jan 2024 09:21:17 GMT

Hi all,

As per palo alto documentation if we enable preempt in HA then primary palo alto will reclaim its active position if it comes back. Does this reclaim works on complete device failure or for any monitoring link/path failure also.

Re: Preempt behaviour in HA

jpomachagua — Thu, 11 Jan 2024 20:37:57 GMT

Hello @vishalrsshah

The preempt feature only becomes effective when the primary firewall returns to an active state. However, if link or path monitoring fails, the primary firewall will enter to a non-functional state and will not follow the preempt configuration.

Re: Preempt behaviour in HA

vishalrsshah — Fri, 12 Jan 2024 04:24:01 GMT

So if failed link/path of primary firewall recovers than in that case preempt works ?

Re: Preempt behaviour in HA

jpomachagua — Fri, 12 Jan 2024 16:56:00 GMT

Hello @vishalrsshah

No, the preempt feature will not be effective because the firewall will be in a non-functional state due to the link or path failure.