topic Re: Commit Function on Suspended PA in General Topics

Commit Function on Suspended PA

MP18 — Mon, 11 Nov 2019 00:59:01 GMT

When PA is in active passive mode.
I suspended the active PA and passive took over.

This is fine.

I did the config changes on the suspended PA and did the commit.
I saw that config changes from suspended PA got syn with active PA?

My understanding of suspended PA is that they are not in HA.
IF they are not in HA then how come config syn happened from suspened PA
to Active PA?

Need to understand this behavior in deeper level?

Re: Commit Function on Suspended PA

BPry — Mon, 11 Nov 2019 02:18:42 GMT

@MP18,

Suspending the firewall doesn't remove it as an HA member, it simply prevents the cluster from failing traffic over to the "suspended" firewall. All other functionality is still going to work, as you've noticed. You are simply making it so that the suspended device can't take over traffic flow.

Re: Commit Function on Suspended PA

MP18 — Mon, 11 Nov 2019 03:10:25 GMT

Many Thanks for explaining that to me BPry.

Its pleasure when you reply to the posts.

Regards

Mike