Running config not synchronized - Sync to peer

[Network-Delivery]

Hello ! 

We encounter a problem on a power supply on one of our Palo Alto. Since power supply replacement, we've the message "Running config not synchronized  - Sync to peer" but i've one question : Is the active firewall configuration will be pushed on passive active firewall ?

Other question, since we've connected "new" firewall, in our Panorama we see in Panorama > Managed Devices that there is one firewall which is disconnected. I check this URL it seems all is OK.

Thanks in advance for your help.

[BPry]

@Network-Delivery,

You always want the configuration on the Active/Passive HA members to match, so that in the event of a failover you don't have a policy that was allowing traffic to something nolonger working as it doesn't exist on the other member. Sync the configuration and whatever member is currently Active will push it's configuration to the passive member. 

As for your second question it depends on what you consider OK? There is likely something that is stopping your new firewall from communicating with your Panorama instance. This would mean that you can't actually manage the new firewall with Panorama. 

[Network-Delivery]

@BPry

Thanks a lot for your answer, i had a doubt regarding which configuration will be push on which firewall.

I continue to check for the firewall which appears to be disconnected.

[BPry]

@Network-Delivery,

Just an FYI on the disconnected firewall,

You actually need to figure out why this isn't connecting to Panorama. Generally this is due to the fact that the firewall isn't configured to allow the traffic, or something between the firewall and Panorama is blocking the traffic.