If untrust interface fails on firewall, Then on other leg trust interface should go down....

[RanjitMandal]

Team,

Any idea on belows, Pls share.

How to make firewall trust interface down if untrust fails on Active/Active setup in PA firewalls.

Don't want to manually make it down. Facing challenges in Azure VM Active/Active firewall.

[aleksandar.astardzhiev]

Hey @RanjitMandal ,

If it is virtual firewall in Azure - what do you mean by "untrust fails"?

I am assuming you are using the "Load balancer sandwich"  approach since Palo Alto in Azure doesn't support Active/Active HA clustering, right?