topic how firewall HA (A/P) synchronise when they are managed with panorama and with port data not out of band port in Panorama Discussions

how firewall HA (A/P) synchronise when they are managed with panorama and with port data not out of band port

Bouthaina — Mon, 01 Jul 2024 10:27:50 GMT

how firewall HA (A/P) synchronise when they are managed with panorama and with port data not out of band port ??

Re: how firewall HA (A/P) synchronise when they are managed with panorama and with port data not out of band port

PavelK — Tue, 02 Jul 2024 00:36:20 GMT

thanks for post.

The Panorama pushed configuration is not synchronized in A/P Firewall HA pair. You have to push configuration to both active and passive Firewalls. Below are references:

Why Panorama pushed configuration is not synchronized between HA pair of firewalls?

DotW: HA Not Synchronized after Commit from Panorama

Kind Regards

Pavel

Re: how firewall HA (A/P) synchronise when they are managed with panorama and with port data not out of band port

reaper — Tue, 02 Jul 2024 08:21:40 GMT

All the configuration pushed by panorama is applied to the firewalls in a cluster individually. This specific configuration is not synchronized and needs to be pushed to both systems at the same time from Panorama to ensure they are in sync.

The devices do still need an HA1 link to synchronize any local configuration you may have, and to build the cluster.

HA2 is used to synchronize sessions as per usual