PaloAlto Passive Firewall Monitoring in HA Setup

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience. Visit our blog to learn more.

PaloAlto Passive Firewall Monitoring in HA Setup

L0 Member

Hi everyone,
Greetings!

I’m currently using OpManager to monitor a Palo Alto firewall in an HA Active/Passive setup, and the Link State of the interfaces on the passive device is set to auto.
While OpManager is able to correctly pull interface details from the active firewall, I am experiencing issues with the interface status of the passive firewall. The interface status for the passive firewall is showing as down in OpManager, while the GUI on the actual firewall shows the interface as up.

Are there any changes I can make in the firewall configuration to ensure that OpManager can fetch the interface details from the passive firewall correctly?

Any insights on this issue would be greatly appreciated.
Thanks in advance!

1 REPLY 1

Community Team Member

Hi @USER111 ,

 

Are you hoping to poll the data interfaces on the passive device? The data interfaces are technically "up" but operationally inactive and do not participate in network activity in any way until the system becomes active. Im not sure what you can change on the firewall to monitor the data interfaces, but if you wanted to monitor the device, you can point SNMP to the management IP of the passive fw. 

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.
  • 200 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!