Palo alto high avaialability

vishalrsshah — Mon, 07 Jul 2025 11:53:12 GMT

Hi All,

I have configure HA between palo alto devices and integrated with Panaroma. However Ha managebility been through locally from FW only. Now need to manage HA from panaroma,. Need to know what will be impact here

Re: Palo alto high avaialability

PavelK — Mon, 07 Jul 2025 22:54:42 GMT

Hello @vishalrsshah

thanks for post!

Personally, I have always opted for having HA managed locally in the past. If you decide to migrate HA configuration under Panorama, I can think of below caveats with overriding and Template variables (If you have a single Template for both Firewalls in HA pair):

Panorama managed HA cluster device facing High-availability configuration overridden when there is a HA configuration sync from the peer

How to configure template Variables for High Availability Active/Passive

How to use one Template stack for a high availability Firewall Pair on Panorama

Please keep in mind that local configuration will take precedence over Panorama pushed configuration until you manually override it locally or use force template values option.

When it comes to actual migration with configuration switch from local to Panorama configuration, I do not expect issue / outage during process.

Kind Regards

Pavel

topic Re: Palo alto high avaialability in Next-Generation Firewall Discussions

Palo alto high avaialability

Re: Palo alto high avaialability