You can set up two Palo Alto Networks firewalls as a high-availability (HA) pair. If you set up an HA pair and one firewall in the pair fails, the other firewall is available minimizing downtime. The firewalls in an HA pair use dedicated or in-band HA ports to synchronize data—network, object, and policy configurations—and to maintain state information. For a consolidated application and log view across the HA pair, you must use Panorama, the Palo Alto Networks centralized management system.
Learn how to use reliability and high-availability features:
This course is for security engineers, security administrators, security operations specialists, security analysts, and support staff who want to learn how to extend the reliability and availability of their next-generation firewalls.