04-02-2023 11:40 PM
Can we separate the PA-850 two of HA boxes using Fiber to Copper Media Convertor in case I want to keep both boxes in different buildings to achieve HA ( our boxes are in Active-Passive mode ) ?
Current configuration of HA is on Copper Ports.
04-03-2023 02:42 AM
Hi @GajananDixit ,
Yes, it can be done. Check out this discussion -> https://live.paloaltonetworks.com/t5/general-topics/high-availability-for-firewalls-in-diferent-loca....
You can use IP addresses for your HA2 links so they can route across your network. In that scenario, PANW recommends encrypting the traffic.
04-03-2023 10:42 AM
If you're going to use a media converter the only thing I would really caution is using cheap devices for these links. I'd recommend spending the money for a managed unit so that you can monitor for faults outside of the interface just failing.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!