topic Re: Study Guide PCNSE in contradiction with the Technical doc. in Next-Generation Firewall Discussions

Study Guide PCNSE in contradiction with the Technical doc.

remy2vad — Mon, 12 Feb 2024 18:26:11 GMT

Hi !,

Just want to be sure please, The study guide page 181 mention that to use data port for HA1 link and management port as HA1 backup but it's not what is written in the technical doc... HA1 on Mgt port for PA without dedicated port and a data port for HA1 backup.

I guess the technical doc is correct.

All the best

Ramin

Re: Study Guide PCNSE in contradiction with the Technical doc.

zahmed01 — Mon, 12 Feb 2024 18:36:17 GMT

Hello @remy2vad ,

Thanks for your feedback.

Can you please share both the link and exact passage on that page for the study guide along with the tech doc that you are referencing?

Re: Study Guide PCNSE in contradiction with the Technical doc.

remy2vad — Tue, 13 Feb 2024 14:24:11 GMT

Hi,

Hope this helps:

From the sudy guide downloaded Jan 2023 version page 181:

5.3.6 HA interfaces
HA Links and Backup Links
The firewalls in an HA pair and cluster use HA links to synchronize data and maintain state
information. Some firewall models have dedicated HA ports—control link (HA1) and data link
(HA2)—while others require you to use the in-band ports as HA links. Firewalls in an HA cluster use
an in-band Layer 3 HA4 interface for cluster session synchronization as follows:
● For firewalls with dedicated HA ports, use these ports to manage communication and
synchronization between the firewalls.
● For firewalls without dedicated HA ports, use a data plane port for the HA port and use the
management port as the HA1 backup.

and this the link to the tech doc.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-concepts/ha-links-and-backup-links

The firewalls in an HA pair use HA links to synchronize data and maintain state information. Some models of the firewall have dedicated HA ports—Control link (HA1) and Data link (HA2), while others require you to use the in-band ports as HA links.

For firewalls with dedicated HA ports, use these ports to manage communication and synchronization between the firewalls. For details, see HA Ports on Palo Alto Networks Firewalls.
For firewalls without dedicated HA ports such as the PA-220 and PA-220R firewalls, as a best practice use the management port for the HA1 port, and use the dataplane port for the HA1 backup.

Re: Study Guide PCNSE in contradiction with the Technical doc.

zahmed01 — Tue, 13 Feb 2024 19:40:01 GMT

Hello @remy2vad ,

Thank you for the details, I will check on this with the documentation team and update back on here as soon as any updates come.

We appreciate you bringing this to our attention.

Re: Study Guide PCNSE in contradiction with the Technical doc.

remy2vad — Wed, 14 Feb 2024 00:04:42 GMT

Look forward !