PA 5220 vsys HA Support

Showing results for 
Show  only  | Search instead for 
Did you mean: 

PA 5220 vsys HA Support

L0 Member



we have a pair of PA 5220 appliances currently running only the default vsys (vsys 0) in an HA (Active / Active) Setup.


We would like to add additional vsys instances and also have each of the new instances running in a HA A/A Setup.


Would the HSCI Port (currently configured for HA2 and HA3 HA A/A Traffic/Sessions support) as well as the HA1A and HA1B ports be able to serve ALL VSYS instances running on the 2 physical appliances ? (I would expect so)


Are there any limitations that we should be aware of when deploying such scenario ?


Is there any technical documentation focusing on this ?


Thank you.


L6 Presenter



Active / Active and multi-vsys on a 5220...How much are you expecting to push for throughput in each VSYS?  Are you expect each VSYS to need to talk to the other VSYS?  What stands out most to me right now is something @vsys_remo mentioned recently in another thread, the 3.5G max of inter-vsys throughput.



the idea is simply having an extra vsys (that is, the "default" vsys 0 and a second "vsys 1") and having both running in a HA A/A scenario. No Inter-vsys communication between the two vsys system is planned / expected.


Back to my question: is it possible to have the HA 1/2/3 traffic for both vsys systems being served physically via the same HSCI and the HA1a / HA1b links ?


More generally, can you perhaps recommend any technical guide / documentation describing in detail this very specific topic for the 5220 PA System ?



Cyber Elite
Cyber Elite


HA is a system configuration, not a vsys configuration. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!