topic Re: Firewalls in HA in Next-Generation Firewall Discussions

Firewalls in HA

SudarshanKasat03 — Wed, 14 May 2025 08:26:06 GMT

I am facing one issue, my active firewall is not down but I am not able to access it via GUI and CLI (The management access is gone). In this case I want to make my secondary firewall as active. If I change the priority of secondary firewall will the change will be pushed in paloalto firewall? And will my secondary becomes the active one. My firewalls are managed via Panorama

Re: Firewalls in HA

reaper — Wed, 14 May 2025 11:02:37 GMT

if both your firewalls are configured with preempt enabled, dropping the priority of the secondary below that of the primary will force the firewalls to fail over

if preempt was not set, you can run the following command to suspend the primary from the secondary:

request high-availability state peer suspend

Re: Firewalls in HA

SudarshanKasat03 — Thu, 15 May 2025 00:45:00 GMT

Hi Reaper,

Thanks for the prompt response. I will check and update here.