- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
01-05-2020 05:36 AM
Hello All,
The firewalls are configured in high availability (A/P) but the running configuration is not synchronized.
I have already tried to restarting management server of both firewall as well I tried to sync manually but getting below error:-
After that, I have tried to sync from CLI mode by this command:- request high-availability sync-to-remote running-config
is showing failed to synchronize running-config.
Can anyone help me?
01-05-2020 11:31 AM
On the Active PA click on syn to peer
Also before that install all the dynamic updates on both active and passive firewall
01-05-2020 11:40 AM
@MP18 I have tried already but same issue persist.
01-05-2020 11:50 AM
Try this on PAssive PA
request high-availability sync-to-remote running-config
01-05-2020 11:53 AM
@MP18 I have tried this command to both firewall but same issue was happening.
01-05-2020 12:00 PM
On active PA any change done?
if you revert back to previous config on active PA does it work?
Paste the output of
less mp-log ha_agent.log
01-05-2020 12:04 PM
Also For successful HA configuration, the below must match between the two firewalls.
Version Compatibility: Software Version: Match Application Content Compatibility: Match Anti-Virus Compatibility: Match Threat Content Compatibility: Match VPN Client Software Compatibility: Match Global Protect Client Software Compatibility: Match
01-06-2020 04:50 AM
@ It is necessary to import all certificates from active firewall to passive firewall?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!