how firewall HA (A/P) synchronise when they are managed with panorama and with port data not out of band port

[Bouthaina]

how firewall HA (A/P) synchronise when they are managed with panorama and with port data not out of band port ??

[PavelK · Accepted solution]

Hello @Bouthaina

thanks for post.

The Panorama pushed configuration is not synchronized in A/P Firewall HA pair. You have to push configuration to both active and passive Firewalls. Below are references:

Why Panorama pushed configuration is not synchronized between HA pair of firewalls?

DotW: HA Not Synchronized after Commit from Panorama

Kind Regards

Pavel  

[reaper · Accepted solution]

All the configuration pushed by panorama is applied to the firewalls in a cluster individually. This specific configuration is not synchronized and needs to be pushed to both systems at the same time from Panorama to ensure they are in sync.

The devices do still need an HA1 link to synchronize any local configuration you may have, and to build the cluster.

HA2 is used to synchronize sessions as per usual