topic Re: Sync config between HA peer in Next-Generation Firewall Discussions

Sync config between HA peer

chansitw — Mon, 01 Aug 2022 07:05:46 GMT

If our fw ha group is managed under Panorama, is it necessary to sync config?, is it the best practices ?

Re: Sync config between HA peer

PavelK — Mon, 01 Aug 2022 08:11:15 GMT

when Panorama is not in sync between primary and secondary nodes, it has no functional impact on registered/managed Firewalls, however you should sync them, then all objects and policy rules, device group objects and rules, template configuration are identical across both Panorama nodes. Make sure you are on Panorama Primary-Active, then click "Sync to peer". Here is reference in documentation: https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-high-availability/synchronization-between-panorama-ha-peers

Kind Regards

Pavel

Re: Sync config between HA peer

chansitw — Fri, 21 Oct 2022 20:06:21 GMT

Thank you for your reply.

I already discuss to my team and fixed this issue.