About nattapong_thi

2 firewalls configured with HA active/passive, And enabled preempt on both of firewalls Everythings find, can synchronize configuration and session   firewall-A is active-firewall with priority 100 firewall-B is passive-firewall with priority 120 HA timer settings is recommended   But when I was testing for HA switch over by unplugged a interface on Active firewall (firewall-A), firewall-A moves into passive state, then active state again then passive state finally moves into "Preempt loop detected",   Actually I know that it will switchover 3 times after change firewall-A to suspend state   Is that a normal situation? Why does firewall-A still need to preempt itself as a active firewall even I did not put cable back (port still down)?   ... View more

For an example, I have 2 security policies   ruleA) source ip: any, source zone: any, destination ip: any, destination zone: any, application: dns, service: any, action allow ruleB) source ip: any, source zone: any, destination ip: any, destination zone: any, application: any, service: any, action allow   and traffic initiate from client is DNS request port53, my question is when Paloalto still not know the application yet (or application is incomplete), which policy will apply for the traffic?   Pls share me a reference guide also, Thank you in advance   ... View more

When I have a firewall configured as a SDWAN function with 2 DIA interfaces (2 ADSL)   How to check whether links are ready for use? Any options?   I tried to configure path monitoring but there are no options for source IP, It's seem SDWAN interface do not support path monitoring   ... View more