TAP interface questions

[VSU_ITSEC]

I'd like to monitor a portion of my network on my failover PA in TAP mode.

Will this affect my HA pair at all? 

Is it possible to set up an aggregate TAP of 2 ports?

thanks in advance...

[Raido_Rattameister]

Do you mean that passive firewall in active/passive cluster would perform monitoring (have TAP port listening)?

You can't do that because as name says - it is passive. Network ports are turned off on that fw.

[rmonvon]

Also, yes you can place 2 tap ports across 2 aggregated links.  Just make sure to put both tap ports on the same security zone.