topic PA Device Interfaces Fail Open in General Topics

PA Device Interfaces Fail Open

billpipes — Mon, 11 Mar 2013 18:30:39 GMT

Greetings,

Will PA device interfaces fail open if the device has a power failure, similar to IDS/IPS sensors which have relay in the interfac?

thx,

Bill

Re: PA Device Interfaces Fail Open

gwesson — Mon, 11 Mar 2013 18:33:46 GMT

Hi Bill,

No, there are no hardware relays on the firewalls. This is purposefully designed to allow for any configuration of interfaces. A pair of interfaces with a hardware relay would necessarily tie those to interfaces together and only allow a transparent (virtual wire) configuration to be functional during a power outage. As is, the firewalls can have any two interfaces in virtual wire mode, or any other combination of L2, L3, Tap, etc.

Hope this helps,

Greg

Re: PA Device Interfaces Fail Open

knarra1 — Mon, 11 Mar 2013 18:37:20 GMT

PAN devices cannot support the interfaces physical relay like other IPS & IDS devices during the device powered down as we are a firewall device supporting L3 , L2 modes.

Re: PA Device Interfaces Fail Open

billpipes — Mon, 11 Mar 2013 18:42:30 GMT

Thanks for the quick reply.