5050 and 5020 HA Setup

[LouisScaringella]

Is it possible to have HA successfully setup between two different platforms? In my case I have a customer with a 5020 and a 5050. I know the documentation states that it must be the same platform, but was curious if anyone has ever tried doing this.

Thank you,

-Louis

[panos · Accepted solution]

PA - HA between a different PA model

[HULK]

Hello Louis,

As per my understanding, we can  not set up HA between PA 5020 and 5050. Because hardware is slightly different between PA 5020 and 5050.

PA-5020:

5 Gbps FW

2 Gbps threat prevention

2 Gbps IPSec VPN

5,000 SSL VPN Users

1,000,000 sessions

Up to 20 VSYS

(8) SFP (1 Gig) I/O

(12) 10/100/1000

DP0, DP1

PA-5050:

10 Gbps FW

5 Gbps threat prevention

4 Gbps IPSec VPN

10,000 SSL VPN Users

2,000,000 sessions

Up to 125 VSYS

(4) SFP+ (10 Gig) I/O

(8) SFP (1 Gig) I/O

(12) 10/100/1000

DP0, DP1

Thanks

[HULK]

Hi Louis,

Only if two same model PA firewalls having different drive disk configuration, then also it will allow to enable HA. Other than, you should have exactly the same hardware in order to enable HA between 2 PA firewalls.

Because, the hard drive disk configuration check is done only locally on the device.

Thanks