topic Backup Peer HA1 IP Address ? in Next-Generation Firewall Discussions

Backup Peer HA1 IP Address ?

Walt — Wed, 25 Feb 2026 15:47:37 GMT

Just completed the PALO BPA and we have a recommendation for "No backup to the HA1 peer IP address is configured" We've tested failover and it works perfectly but my understanding is that this is incase the primary HA connection went down. I read different opinions that using the management interface IP for this fine? Has anyone done that? And if so my question is if I am on my primary do I set the Backup Peer HA1 IP Address to its management interface or to the the IP of the management interface on the secondary firewall? I couldn't find anything explaining that.

Re: Backup Peer HA1 IP Address ?

TomYoung — Wed, 25 Feb 2026 18:25:06 GMT

Hi @Walt ,

Using the management IP address for the Peer HA1 IP Address or the Backup Peer HA1 IP Address is fine. I have done it many times. It saves you from having to create a dedicated HA interface. You would configure the Backup Peer HA1 IP Address as the management IP address of the other NGFW.

Thanks,

Tom