HA Sync with different Configuration

[theonewhoknocks]

I have two firewalls previously on HA (Active-Passive mode). We had to shutdown the passive device due to some troubleshooting. Then we had to roll-back the config of the active PA.

Here's the current setup. (HA links not yet cabled)

Active PA - lower config version (e.g. version 207)

Backup PA - higher config version (e.g. version 210)

If I connect the HA links, will the backup PA sync to the active PA config version 207? Or will the active PA sync to the backup PA with config version 210?

[Mick_Ball · Accepted solution]

it's my understanding, and somebody please update if incorrect, that when you connect the HA link the devices will not sync.

you will have the option in the HA widget to sync to peer..... this can be done from either device....

[reaper · Accepted solution]

a config sync is only triggered when a commit is pushed or a manual sync is initiated, so no need to worry when you hook the passive back up to the HA

! make sure to keep it suspended until the 'state' sync has completed so it is aware there already is an active member and it doesn't try to become active by itself, easiest way to spot that is to see if it is populating HA information on the GUI dashboard

[theonewhoknocks]

Hi Mickball, you are correct. Thanks!