PA-220 HA - License Required?

[Jack45]

I intend to purchase two new PA-220s in my company and want to set them up in a high available configuration in case one dies. Is there a license that's required? Sorry.. very new to PA and just trying to learn.

[PavelK]

Thank you for posting question @Jack45 

There is no specific license to enable HA, however both firewalls should be running identical set of licenses (For example both Firewalls running TP, WF,... licenses). Here is a link for HA pre-requisites:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activepassive-ha/...

All what you have to do is to proceed with HA configuration on both of PA-220: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-high-availabili...

PA-220 does not have any dedicated HA ports, so you will have to use regular data plane ports. The rest is the same as documentation. If you get stuck with your HA configuration do not hesitate to post your issue here.

Kind Regards

Pavel

[aleksandar.astardzhiev]

Hi @Jack45 ,

As addition to @PavelK excelent answer you should check for HA license bundle. It is little cheaper than buying separate licenses for both devices. You still receive separate licenses for each device.

[Jack45]

Thanks for your suggestions.