Difference Between 1 and 2 VM-Series Firewalls Without Subscription Licenses

[A.Batrisyia]

Hi Team,

I am looking to understand the practical differences between deploying 1 unit and 2 units of Palo Alto VM-Series firewalls, particularly without any subscription licenses. I am aware that subscription licenses enable services like Threat Prevention, URL Filtering, and WildFire, but in a scenario where no subscriptions are used, what would be the key distinctions between running 1 firewall vs. 2 firewalls?

Thanks in advance for your insights!

[BPry · Accepted solution]

@A.Batrisyia,

Generally speaking you would want HA regardless of whether you're deploying a physical or a virtual firewall in any sort of production environment. That's what is going to account for failures and actually allow you to perform maintenance on the firewall without any impact to services.