Difference in Session Synchronization configuration output in PAN-OS 11.2 Active/Passive HA

cpcpcptest176 — Mon, 27 Apr 2026 10:05:46 GMT

Hello experts,

I would like to confirm the HA configuration behavior in PAN-OS 11.2.

We have two firewalls configured in an Active/Passive HA pair. In the GUI, Enable Session Synchronization is enabled on both devices.

However, when checking the configuration from the CLI, the following line is displayed on one device:

”set deviceconfig high-availability group state-synchronization enabled yes”

On the other device, the same configuration line is not displayed.

In this case, is it correct to understand that enabled yes is the default value, and therefore it may not be exported to the XML / set-format configuration unless it was explicitly configured?

In other words, could this difference simply mean that one device has yes explicitly saved due to a past operation, while the other device is using the default value?

If both devices show Session Synchronization as enabled in the GUI and CLI, can this XML / set-format difference be safely ignored?

I would like to confirm whether this should be treated as an actual configuration difference, or simply as a display difference caused by explicit vs. implicit default values.

If anyone is familiar with the PAN-OS 11.2 behavior or has observed a similar case, I would appreciate your advice.

Re: Difference in Session Synchronization configuration output in PAN-OS 11.2 Active/Passive HA

Raido_Rattameister — Tue, 28 Apr 2026 12:45:36 GMT

Just checked my recently set up HA pair.

11.2.10-h5

Both firewalls show following output (so only keep-alive checkbox setting).

show | match state-synchronization
set deviceconfig high-availability group state-synchronization ha2-keep-alive enabled yes

topic Difference in Session Synchronization configuration output in PAN-OS 11.2 Active/Passive HA in Next-Generation Firewall Discussions

Difference in Session Synchronization configuration output in PAN-OS 11.2 Active/Passive HA

Re: Difference in Session Synchronization configuration output in PAN-OS 11.2 Active/Passive HA