topic If untrust interface fails on firewall, Then on other leg trust interface should go down.... in General Topics

If untrust interface fails on firewall, Then on other leg trust interface should go down....

RanjitMandal — Sun, 01 May 2022 18:06:42 GMT

Team,

Any idea on belows, Pls share.

How to make firewall trust interface down if untrust fails on Active/Active setup in PA firewalls.

Don't want to manually make it down. Facing challenges in Azure VM Active/Active firewall.

aleksandar.astardzhiev — Sun, 01 May 2022 20:32:36 GMT

If it is virtual firewall in Azure - what do you mean by "untrust fails"?

I am assuming you are using the "Load balancer sandwich" approach since Palo Alto in Azure doesn't support Active/Active HA clustering, right?