Question on PA-440 Failover

D.Callahan — Fri, 30 Jan 2026 16:41:03 GMT

Question regarding PA-440 and failover.

How can I setup a failover in a PA-440 between two physical ports on that PA-440 firewall. For example: If Eth1/7 was connected to a cradlepoint and port 8 was a ipsec tunnel.

What is the proper way to config pa-440 to failover from cradlepoint to another interface going over ipsec tunnel? Can the firewall be configured that if no traffic is going over port 7, then go to port 8?

Re: Question on PA-440 Failover

Raido_Rattameister — Fri, 30 Jan 2026 17:31:13 GMT

You can configure path monitoring in your static routes.

If specific destinations can't be reached then route is removed from routing table.

https://docs.paloaltonetworks.com/ngfw/networking//static-routes/configure-path-monitoring-for-a-static-route

topic Re: Question on PA-440 Failover in General Topics

Question on PA-440 Failover

Re: Question on PA-440 Failover