Active/Active HA managed by Panorama

[howardtopher]

In the Active/Active HA setup, there is an option to "Enable Config Sync".  In the past I have used this because I didn't have Panorama.  Now I have a new set of PA5050s that are running in Active/Active mode and we purchased Panorama to go with it.  My question is should I enable the config sync?  Or should I disable it since Panorama pushes to each device individually?  I'm not able to find any documentation recommending one way or the other.

[bmorris1]

Hi,

From what I can see, the documentation recommends that this be turned on. This is from the help guide:

'Enable Config Sync—Select this option to enable synchronization of configuration settings between the peers. As a best practice, config sync should always be enabled.'

hope this helps,

Ben

[rob72]

You should enable config sync. Some aspects of the Active-Active configuration may be best managed locally on the devices themselves, in this case you will need config sync.