Which Sessions Will Sync Between HA Peers?

Which Sessions Will Sync Between HA Peers?

24064
Created On 09/25/18 19:25 PM - Last Modified 07/08/21 03:11 AM


Environment


  • Palo Alto Firewall.
  • PAN-OS 8.1 and above.
  • HA (High Availability) Configuration.


Resolution


In High Availability (HA) configuration, all the sessions in the session tables are synchronized with the following exceptions:

  • In Active/Passive mode, ICMP and host sessions are not synchronized between peers.
  • In Active/Active mode, host session, multicast session, or BFD session information are not synchronized.
Note: A host session is a session terminated on one of the firewall interfaces, such as an ICMP session pinging one of the firewall interfaces or a GP tunnel.

 

 



Additional Information


Synchronization of System Runtime Information

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClY1CAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language