About u5801

Hi, thank you for your answer. There is only one thing I'm still not sure about-lets says I have two PA 2020s and I put the IP address 192.168.1.1 on the first and 192.168.1.2 on the second and then join them in an HA cluster and sync policies. When the primary device goes down, does the secondary device take over 192.168.1.1 and 192.168.1.2 or does it replace 192.168.1.2 with 192.168.1.1? Thanks ... View more

Hi, Thank you for your answer, but either I'm not understanding your answer or I didn't make myself clear. To give an example, Check Point firewalls allow you to set up cluster members to share an IP address, but only the active member receives and processes traffic to it. This is useful for next-hop addresses-set your downstream router to use the virtual ip address, and whichever gateway is the active member receives traffic to that address. When the primary gateway fails the secondary address takes over the virtuall ip address and begins to receive and process traffic destined to that address. I cannot find a way to create this 'virtual' address in Palo Alto, and as such I don't understand how you would set a default gateway to an address if a HA cluster doesn't have a "floating" IP address. Thank you again ... View more