Passing Cisco heartbeat traffic through the passive device's data plane

[mcragg]

In a HA configuration is it correct to assume that the dataplane won't pass traffic?  Network has a need to pass a heartbeat of sorts through the passive firewall for network path health.  Is it still possible to pass this traffic through ingress/egress interfaces for path verification?

[reaper]

hi @mcragg

That's a correct assumption: A passive HA peer does not pass or process traffic 

If packets need to pass through that physical device, the only solution would be to switch to an Active/Active setup (or review the need for these packets to go through the node rather than through the cluster as an entity)

[mcragg]

Thank you much.