HA fail-over if Root partition is Full

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

HA fail-over if Root partition is Full

L2 Linker

Hi Team

 

Should HA fail-over occur if the root partition is full on Active firewall, causing the outage ?

 

Case 00590455

PA-5050

-----------
Root partition was 100% full and firewall was not allowing new Global Protect connections. PA Engineer helped him in deleting files from Roor partition that fixed the issue. Now the firewall was allowing new GP connections.

 

Customer is asking that what is the purpose of having firewalls in HA mode  when one firewall was causing the outage just because the disk was full. Customer is expecting that the firewall should do Fail-over in this condition.

 

Is it possible that PaloAlto firewall can do fail-over based on this condition ?

What customer can do to prevent this outage next time ?

 

 

2 REPLIES 2

L6 Presenter

Hi,

 

Interesting one. My guess is because full root partition is not a reason/criteria for HA to failover. As the firewall was operational (from the physical side) hence no failover. Did you ask TAC same question? What was the reason for the root to get full? Can you look into how to avoid that next time?

 

Thx,

Myky

Hi,

 

In general, no service interruptions should result from the root partition being full, as it is not used for any operational storage. However, a full root partition can cause upgrades or certain packet captures to fail etc.

 

One common cause of a filled partition results when an admin is troubleshooting certain processes and creates core files or because of any reason core file gets created (the same can be verified by running command show system files). These files are stored on the root and remain there until deleted by the administrator.

 

As far as I understand it is still operational, even though root partition is full and hence it will not fail-over.

 

Best Regards,

 

Fozail

  • 2234 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!