We currently have a HA pair configured in a data centre and will soon be moving to a new site. For a seemless migration, we were wondering if there are any issues with or considerations we'd need to make if we were to disable HA and remove the HA config, reset and move the passive device to the new site to get it up and running, then move the device from the old DC to the new site and join it as the passive device?
In my head, it seems straight-forward, but want to make sure I havent missed anything.
Thanks in advance.
Solved! Go to Solution.
You want to run the 2 firewalls independently? I'm not sure you are allowed to do that from a licensing point of view. You probably have subscriptions for a HA pair, not 2 independent firewalls. You should check with Palo Alto Networks if you can do that for a short period of time.
> Yes, you can suspend the passive device first
> Move that passive device to the other site
> Keep the Preemptive option checked for the primary device
I don't see any issues with this deployment, only one concern when the passive unit is in transit the data center will be left with a stand alone device.
you can always do following:
- disable preemtion,
- failover to passive,
- move active to the new site, configure for the new site,
- move passive to the new site, push configuration from active, test, enable preemption if it was used.
Not sure about licensing, honestly :)
I have been advised that doing this would not cause any licensing issues. It would only cause a license issue if you moved both appliances to separate locations and then ran them as standalone appliances from there on in.
Thanks to all for your assistance.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!