topic Re: HA, Active-Active or Active-Passive in General Topics

HA, Active-Active or Active-Passive

Mahmoud-Osama — Tue, 08 Dec 2020 07:57:17 GMT

Dears Expertise,

we have 2 PA-3220, and we think to configure HA between those devices,

now what is the best practices for mentioned topic

Active-Active or Active-Passive

just i want to know what is the essential difference between them, when i need to use Active-Active or Active-Passive

Re: HA, Active-Active or Active-Passive

kiwi — Tue, 08 Dec 2020 09:54:40 GMT

Hi @Mahmoud-Osama ,

For deciding between using active/active or active/passive please check the following page where the differences between the different HA modes is explained:

HA modes

Cheers !

-Kiwi

Re: HA, Active-Active or Active-Passive

SutareMayur — Tue, 08 Dec 2020 12:41:17 GMT

Hi @Mahmoud-Osama ,

Choosing type of HA mode (Active-Passive or Active-Active) depends on the different use cases and requirements. Active-Passive is comparatively simple design.

One of the preferred reasons to use Active-Active setup is when you have Asymmetric Routing. Having said that, there are few other use cases of having A-A setup like when you need to load balance traffic on both instances in real time.

Active-Passive mode is mostly preferred one unless you have some specific use cases as given above which can be fulfilled using Active-Active setup only.

Article shared by @kiwi will give you more understanding about the HA modes.

Hope it helps!

Re: HA, Active-Active or Active-Passive

Mahmoud-Osama — Tue, 08 Dec 2020 12:53:29 GMT

@SutareMayur

thanks for your reply, what i am understanding is as per the article, the active-active mode is not "Load-balance traffic".

Active/Active mode has faster failover and can handle peak traffic flows better than Active/Passive mode because both firewalls are actively processing traffic.

So, I need to understand what is best for me, Active-Active or Active-Passive