Palo alto high avaialability

[vishalrsshah]

Hi All,

I have configure HA between palo alto devices and integrated with Panaroma. However Ha managebility been through locally from FW only. Now need to manage HA  from panaroma,. Need to know what will be impact here

[PavelK]

Hello @vishalrsshah

thanks for post!

Personally, I have always opted for having HA managed locally in the past. If you decide to migrate HA configuration under Panorama, I can think of below caveats with overriding and Template variables (If you have a single Template for both Firewalls in HA pair):

Panorama managed HA cluster device facing High-availability configuration overridden when there is a...

How to configure template Variables for High Availability Active/Passive

How to use one Template stack for a high availability Firewall Pair on Panorama

Please keep in mind that local configuration will take precedence over Panorama pushed configuration until you manually override it locally or use force template values option.

When it comes to actual migration with configuration switch from local to Panorama configuration, I do not expect issue / outage during process.

Kind Regards

Pavel