topic Re: PA-VM HA Failover Procedure in Next-Generation Firewall Discussions

PA-VM HA Failover Procedure

Thomasevig — Sun, 23 Oct 2022 11:01:56 GMT

hello dear forum members,

i have a question regarding

the cluster configuration.

wer'e currently

running a PA-VM in cluster (A/P Mode)

in the organization within an

azure enviornment, both

are configured with different External

ip address.

my question is, in the case of the

active node going down, how does the

procedure happen?

will the sessions be routed to the passive node?

and is the traffic going to be routed to the passive node

as well?

and as for the external ip address, will the passive node

nat the traffic with its ip or the active address?

Thomasevig — Wed, 26 Oct 2022 10:21:17 GMT

hi is there any update can someone find a good answer

Vinod_Pathuri — Fri, 28 Oct 2022 18:20:35 GMT

if failover happens the traffic will be routed via a passive(Current active) firewall only.

and all the internet traffic will be forwarded via the loopback interface and rest are same

Thomasevig — Sun, 30 Oct 2022 07:47:43 GMT

hi thank for the reply,

another question is, once the passive unit takes control will it go out

with its public ip or the active node's ip?