Single firewall with core connections

[clydef]

I have a single firewall no HA at the moment which is connected to my 2 core routers which the routers running HSRP. How does Palo device know which device to send traffic to as it seems its sending too both causing asymmetrical routing.

[santonic]

PA sends traffic where you tell him too. You should tell him to send to cluster IP (or however it's called in HSRP). If that doesn't fix it then it's something wrong with your HSRP.

[BPry · Accepted solution]

@clydef,

You should be sending the traffic to a common shared IP, for example we'll say 10.191.0.1. The standby ip and standby priority statements would take care of which core actually recieves the traffic at any given time.