topic Re: High Availability in General Topics

High Availability

jmck9999 — Tue, 01 Jul 2014 14:23:29 GMT

The Palo Alto instructions to set up High Availability are fairly straightforward, but the devices upstream and downstream barely get a mention. In our case, downstream we have two Cisco switches and multiple VMs attached. Upstream are two Cisco switches to a larger network.

We are considering link-state tracking on the Cisco switches to create the redundancy for the Palo Alto's to failover. Any suggestions or tips?

Re: High Availability

kadak — Tue, 01 Jul 2014 14:30:20 GMT

Hello jmck9999,

The following document illustrates Palo Alto's recommended best practices for HA failover scenarios for link and path monitoring:

High Availability Failover Optimization

Hope that helps!

Thanks and regards,

Kunal Adak

Re: High Availability

hshah — Wed, 02 Jul 2014 23:26:01 GMT

Hello Jmck9999,

You can find supporting documents on bellow link.

https://live.paloaltonetworks.com/search.jspa?q=Link+Monitoring&type=document

Regards,

Hardik Shah

Re: High Availability

pulukas — Thu, 03 Jul 2014 00:31:50 GMT

Since you have dual switches on both sides you are in a good position for reliability in hardware failure modes.

You do need to be sure that your PA tracking will force the failover if EITHER the upstream OR downstream switch fails.

Re: High Availability

dineshgogna — Wed, 24 Mar 2021 10:58:20 GMT

Hi Support,

How can we deploy Palo Alto Firewall in existing Cloud Network with HA mode.

Please help!!