Hi all, We would like to deploy 2 PAs on two different sites in an Active/active design. The two sites are 10ms far away from each other. So the first question is : Is 10ms (RTT) acceptable from a PanOS perspective to enable the HA feature ? The IP plan is not the same on each site. Is it an issue to setup HA active/active in this case ? I've read the documentation, and it seems to be supported if we use the virtual wire implementation case. Best wishes for this new year. Thanks for your help. Regards, EDIT : I've just found a Tech Note describing the HA/HA. Regarding the second question, this documentation gives the answer : we can use the Route Based Redundancy, that's fine. But now, I worry about the load sharing feature. In our case, half of our users are located on site 1 and second half on site 2, So the load sharind is native by design using some IP routing features. Regarding, the session owner, it's easy, we can define it as being the device receiving the first packet. But regarding the session setup, it's not clear : how to ensure that the session setup is the device closest to the user ?
... View more