02-13-2025 10:10 AM - edited 02-13-2025 10:13 AM
Hi @M.Gill298701 ,
Yes, the configuration is exactly the same, and in the event of failover the passive then becomes active.
With active/passive HA, the configuration is exactly the same between both FWs except for a few device configurations listed here. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/high-availability/reference-ha-synchroniz...
For standalone, you configure one FW and the config is synced. For Panorama, you put the HA pair in the same template (and device group). With SCM, it looks like you put them in the same parent folder and modify that configuration scope. If you configure HA in that scope, you will need to use variables as the HA links must have different IP addresses. https://live.paloaltonetworks.com/t5/next-generation-firewall/ha-configurations-in-strata-cloud-mana...
Thanks,
Tom
