topic Re: Dynamic updates download but not install on HA in General Topics

Dynamic updates download but not install on HA

aglej — Tue, 02 Apr 2013 13:14:38 GMT

We've got an HA pair of 5050s. They both have a job to download and install dynamic updates at 12:00 AM.

I've seen occasions where one of the boxes will download but not install the update. They are also set to push a version of the update to the HA peer.

I"m wondering if having them check at the same time and try to push to each other is not ideal.

I'm guessing I should consider stopping the HA sync of dynamic updates, or only have one box check for updates and make that one push the update over to the other.

Anyone doing similar things?

Re: Dynamic updates download but not install on HA

mikand — Tue, 02 Apr 2013 14:44:49 GMT

The bad thing with the later approach is when failover occurs. The now active (previously passive) device will try to get its updates from the now offline box. Also if using this method dont forget to enable preemptive failover aswell (that is as soon as the original active box (now offline) returns it should take charge of the traffic flows).

Disclaimer: Unless PA already handles this case so you wont end up with a box (after a failover) that never updates its databases...