topic Re: Panorama failover and connection to Firewall in General Topics

Panorama failover and connection to Firewall

MP18 — Mon, 17 Dec 2018 18:56:05 GMT

We have M100 in active and PAssive mode.

Did failover where active was suspended and passive M100 became active

Check the firewall it still shows connected to Suspended PAnorama and it is active one from FW point of view?

is this by design?

Re: Panorama failover and connection to Firewall

MP18 — Fri, 21 Dec 2018 15:46:20 GMT

Need to confirm if Active PAnorama gets suspended the PA which is connected to it will still show that M100 as activ one?

Suspended status of M100 is between Panorama only and it has no impact on the connection of the PA to Panorama?

Re: Panorama failover and connection to Firewall

MP18 — Mon, 24 Dec 2018 16:24:15 GMT

Anybody can answer this please?

Re: Panorama failover and connection to Firewall

MP18 — Mon, 31 Dec 2018 06:34:41 GMT

Anybody can answer this please?

Re: Panorama failover and connection to Firewall

Remo — Mon, 31 Dec 2018 09:08:23 GMT

If possible the firewalls always maintain a connection to both panoramas (if you have configured both panorama servers in the firewall configuration). So in case of a failover panorama sends a notification to the firewalls to tell them about the new situation. Where does your firewall show that it is only connected to the suspended panorama?

Re: Panorama failover and connection to Firewall

MP18 — Mon, 31 Dec 2018 18:16:14 GMT

Normally I do show logging status from firewall to check the status.

But during this failover for Panaroma I did not run the show logging status on any Firewall

But later I checked the system logs during that time frame on both Panorama and Firewall it does not show that connection to the Panorama changed from any of the firewall?

Is system logs right place to check or i should have run the sh logging status on the Firewall during the time of failover?

Re: Panorama failover and connection to Firewall

MP18 — Tue, 15 Jan 2019 14:59:28 GMT

Yesterday i did Panorama upgrade and saw that when you run command

show panorma status

IT shows the Right status of PA with PAnorama.

you were spot on.