High Availability

[jmck9999]

The Palo Alto instructions to set up High Availability are fairly straightforward, but the devices upstream and downstream barely get a mention. In our case, downstream we have two Cisco switches and multiple VMs attached. Upstream are two Cisco switches to a larger network.

We are considering link-state tracking on the Cisco switches to create the redundancy for the Palo Alto's to failover. Any suggestions or tips?

[kadak]

Hello jmck9999,

The following document illustrates Palo Alto's recommended best practices for HA failover scenarios for link and path monitoring:

High Availability Failover Optimization

Hope that helps!

Thanks and regards,

Kunal Adak

[hshah]

Hello Jmck9999,

You can find supporting documents on bellow link.

https://live.paloaltonetworks.com/search.jspa?q=Link+Monitoring&type=document

Regards,

Hardik Shah

[pulukas]

Since you have dual switches on both sides you are in a good position for reliability in hardware failure modes.

You do need to be sure that your PA tracking will force the failover if EITHER the upstream OR downstream switch fails.

[dineshgogna]

Hi Support,

How can we deploy Palo Alto Firewall in existing Cloud Network with HA mode.

Please help!!