HA fail-over if Root partition is Full

[tkhan]

Hi Team

Should HA fail-over occur if the root partition is full on Active firewall, causing the outage ?

Case 00590455

PA-5050

-----------
Root partition was 100% full and firewall was not allowing new Global Protect connections. PA Engineer helped him in deleting files from Roor partition that fixed the issue. Now the firewall was allowing new GP connections.

Customer is asking that what is the purpose of having firewalls in HA mode  when one firewall was causing the outage just because the disk was full. Customer is expecting that the firewall should do Fail-over in this condition.

Is it possible that PaloAlto firewall can do fail-over based on this condition ?

What customer can do to prevent this outage next time ?

[TranceforLife]

Hi,

Interesting one. My guess is because full root partition is not a reason/criteria for HA to failover. As the firewall was operational (from the physical side) hence no failover. Did you ask TAC same question? What was the reason for the root to get full? Can you look into how to avoid that next time?

Thx,

Myky

[fozail]

Hi,

In general, no service interruptions should result from the root partition being full, as it is not used for any operational storage. However, a full root partition can cause upgrades or certain packet captures to fail etc.

One common cause of a filled partition results when an admin is troubleshooting certain processes and creates core files or because of any reason core file gets created (the same can be verified by running command show system files). These files are stored on the root and remain there until deleted by the administrator.

As far as I understand it is still operational, even though root partition is full and hence it will not fail-over.

Best Regards,

Fozail