HA, Active-Active or Active-Passive

[Mahmoud-Osama]

Dears Expertise,

we have 2 PA-3220, and we think to configure HA between those devices,

now what is the best practices for mentioned topic   

Active-Active or Active-Passive

just i want to know what is the essential difference between them, when i need to use Active-Active or Active-Passive

[kiwi]

Hi @Mahmoud-Osama ,

For deciding between using active/active or active/passive please check the following page where the differences between the different HA modes is explained:

HA modes 

Cheers !

-Kiwi

[SutareMayur]

Hi @Mahmoud-Osama ,

Choosing type of HA mode (Active-Passive or Active-Active) depends on the different use cases and requirements. Active-Passive is comparatively simple design.

One of the preferred reasons to use Active-Active setup is when you have Asymmetric Routing. Having said that, there are few other use cases of having A-A setup like when you need to load balance traffic on both instances in real time.

Active-Passive mode is mostly preferred one unless you have some specific use cases as given above which can be fulfilled using Active-Active setup only.

Article shared by @kiwi will give you more understanding about the HA modes.

Hope it helps!

[Mahmoud-Osama]

@SutareMayur

thanks for your reply, what i am understanding is as per the article, the active-active mode is not  "Load-balance traffic".

Active/Active mode has faster failover and can handle peak traffic flows better than Active/Passive mode because both firewalls are actively processing traffic.

So, I need to understand what is best for me, Active-Active or Active-Passive