connectivity issue when firewall HA failover

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

connectivity issue when firewall HA failover

Not applicable

Did anyone encounter such issue?

We noticed that whenever the firewall triggered a failover (FW1 to FW2).

external services seem to be disrupted.

eg1 :Gomes monitoring informed of connection/performance issues (though we test from some countries to be ok) 

eg 2: FTP services from various country reported connection problem (China, Taiwan)

But when we revert back to the FW from 2 to 1(Origin) all services return back to norm.

Please advice..

5 REPLIES 5

L4 Transporter

Hi

witch monitoring did you implement and what are your interface config vwire or other?

Link monitoring enable on the active ethernet interface.

Failure Condition : Any

ok it seams to be a routing issue.

for the monitoring try to use a path monitoring and see what append if you trigger a failover, normaly a revert to good appliance should be triggered automatiquely

if the comportement is like that you have to resolve your routing issue first.

Thanks..

FW1 work perfectly ok, issue only arise when failover to the FW2.

Both are running the same config/path/routes...

How would it be a routing issue?

are you in vwire config?

in that case have a look there https://live.paloaltonetworks.com/message/1628#1628

if you are in L3 config verify  routing from your FW2 with path monitoring 

  • 3188 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!