change standalone node to HA

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

change standalone node to HA

L0 Member

I have Standalone PA 3020 up and running , is being manged by Panorama and now I need to add another PA 3020 to bring in High Availability.

Please help me with the steps that I should follow.


In Panorama We have template stack and Device group for already running standalone PA 3020.

Should I configure HA setting on both firewall and simply push the configuration from Already running PA to newly added PA 3020.?

And once COnfig Sync done, then should I nee do add new PA into existing templates stack and Devices where existing one is already running.



Cyber Elite
Cyber Elite

config sync only pushes local configuration

Panorama config needs to be pushed individually

You can add the new firewall to the same device group and most of the same templates (except HA and mgmt config)


if there is local config, a sync will be needed

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!