topic Re: Does Dynamic Group Tagged address through API survive reboot? in General Topics

Does Dynamic Group Tagged address through API survive reboot?

Sec101 — Wed, 11 Dec 2019 21:38:37 GMT

It appears that these are synchronized through HA, but do IP address objects registered/populated to a Tag through the API survive a reboot?

Re: Does Dynamic Group Tagged address through API survive reboot?

reaper — Thu, 12 Dec 2019 13:01:45 GMT

after a reboot you'll need to repopulate dynamic objects

Re: Does Dynamic Group Tagged address through API survive reboot?

Sec101 — Thu, 12 Dec 2019 17:03:07 GMT

Is this only in a situation where you have a single firewall? If the objects sync inbetween active/passive firewalls, as long as you have one active, that knows about the objects you should be ok right?

ps-Thank you for the reply Reaper.

Re: Does Dynamic Group Tagged address through API survive reboot?

OtakarKlier — Thu, 12 Dec 2019 22:49:40 GMT

Hello,

In an HA pair the objects are synced so yes the passive has the same as the active.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXGCA0

Hope that helps.