Impact of deactivating HA configuration in Azure

[n-tomo]

I have a HA configuration in Azure.

I’m trying to deactivate the HA configuration. If we shut down the Passive side in the Azure portal and delete the VMs, what will be the impact on the Active side?

[kiwi]

Hi @n-tomo ,

Assuming you have an A/P setup ?

If you shut down and delete the passive VM in Azure, your active FW should continue functioning normally.  That said, HA links will go down which might be logged as a failure, but this shouldn't disrupt the active firewall's operation. Traffic forwarding and sessions should continue uninterrupted.

Obviously with HA disabled, you’ll lose automatic failover, so make sure you're OK with this from a risk/uptime perspective.

In case you have an A/A setup it's probably a bit more trickier.

If you delete one A/A peer you’ll likely break traffic symmetry, connections may fail if traffic enters one firewall and exits another. This can result in session drops, especially if asymmetric routing is not well handled. Deleting a node in A/A is riskier and likely will impact traffic unless you rework the load balancer rules, user defined rules, and SNAT behavior.

Kind regards,

-Kim.