https://live.paloaltonetworks.com/t5/general-topics/activate-vsys-in-fw-ha-and-impact-from-panorama/m-p/1247321#M125954 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/85066">@BigPalo</a>,</P> <P>You will want to have a maintenance window since the mismatch state will cause the device to be suspended from an HA aspect, and you'll need to restart the device for the change to take effect. I always prefer to have someone on-site for this sort of maintenance just to ensure that you don't end up with both units thinking they need to be suspended, but you can absolutely do it remotely if needed.&nbsp;</P> <P>Everything you already have configured is already technically in the default VSYS ("vsys1") so nothing really happens from a configuration standpoint with what you already have configured. Since you're using Panorama you'll just want to ensure that multivsys is enabled on the template and then you'll be able to assign vsys to the device group.&nbsp;</P> Tue, 03 Feb 2026 14:26:01 GMT BPry 2026-02-03T14:26:01Z https://live.paloaltonetworks.com/t5/general-topics/activate-vsys-in-fw-ha-and-impact-from-panorama/m-p/1247313#M125951 <P>Hi,</P> <P>&nbsp;</P> <P>&nbsp;</P> Mon, 16 Feb 2026 23:51:46 GMT https://live.paloaltonetworks.com/t5/general-topics/activate-vsys-in-fw-ha-and-impact-from-panorama/m-p/1247313#M125951 BigPalo 2026-02-16T23:51:46Z https://live.paloaltonetworks.com/t5/general-topics/activate-vsys-in-fw-ha-and-impact-from-panorama/m-p/1247321#M125954 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/85066">@BigPalo</a>,</P> <P>You will want to have a maintenance window since the mismatch state will cause the device to be suspended from an HA aspect, and you'll need to restart the device for the change to take effect. I always prefer to have someone on-site for this sort of maintenance just to ensure that you don't end up with both units thinking they need to be suspended, but you can absolutely do it remotely if needed.&nbsp;</P> <P>Everything you already have configured is already technically in the default VSYS ("vsys1") so nothing really happens from a configuration standpoint with what you already have configured. Since you're using Panorama you'll just want to ensure that multivsys is enabled on the template and then you'll be able to assign vsys to the device group.&nbsp;</P> Tue, 03 Feb 2026 14:26:01 GMT https://live.paloaltonetworks.com/t5/general-topics/activate-vsys-in-fw-ha-and-impact-from-panorama/m-p/1247321#M125954 BPry 2026-02-03T14:26:01Z https://live.paloaltonetworks.com/t5/general-topics/activate-vsys-in-fw-ha-and-impact-from-panorama/m-p/1247338#M125955 <P>Thanks Bpry as usual.</P> <P>&nbsp;</P> Mon, 16 Feb 2026 23:51:30 GMT https://live.paloaltonetworks.com/t5/general-topics/activate-vsys-in-fw-ha-and-impact-from-panorama/m-p/1247338#M125955 BigPalo 2026-02-16T23:51:30Z