topic Re: PA-220 HA - License Required? in General Topics

PA-220 HA - License Required?

Jack45 — Tue, 14 Sep 2021 05:01:50 GMT

I intend to purchase two new PA-220s in my company and want to set them up in a high available configuration in case one dies. Is there a license that's required? Sorry.. very new to PA and just trying to learn.

Re: PA-220 HA - License Required?

PavelK — Tue, 14 Sep 2021 05:35:50 GMT

Thank you for posting question @Jack45

There is no specific license to enable HA, however both firewalls should be running identical set of licenses (For example both Firewalls running TP, WF,... licenses). Here is a link for HA pre-requisites:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activepassive-ha/prerequisites-for-activepassive-ha.html

All what you have to do is to proceed with HA configuration on both of PA-220: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-high-availability/configure-ha-settings.html

PA-220 does not have any dedicated HA ports, so you will have to use regular data plane ports. The rest is the same as documentation. If you get stuck with your HA configuration do not hesitate to post your issue here.

Kind Regards

Pavel

Re: PA-220 HA - License Required?

aleksandar.astardzhiev — Tue, 14 Sep 2021 11:19:05 GMT

Hi @Jack45 ,

As addition to @PavelK excelent answer you should check for HA license bundle. It is little cheaper than buying separate licenses for both devices. You still receive separate licenses for each device.

Re: PA-220 HA - License Required?

Jack45 — Mon, 20 Sep 2021 05:42:43 GMT

Thanks for your suggestions.