About PearsonSamuel

Hello,   I am looking for some assistance in regards to my HA setup. We currently have x2 PAN-3220 devices connected via dedicated HA-1 ports and are fully synchronized currently.   We are in the process of moving between floors in our office and will be moving 1 ISP and 1 FW at a time to the new location. My question is, I would like to retain the HA between the firewalls between the floors during the temp split, is this possible when the dedicated HA ports will no longer be physically connected? Can we extend the L2 and trunk the HA subnets across the floors? I have never had to do this before so not sure if it is possible.   I was thinking of connecting either end of the HA to a switch on each floor and trunking the VLAN/subent of the HA between them. I am also open to suggestions.   Thanks in advance 🙂 ... View more

Hello community, first time poster here but I am reasonably new to the palo alto world! I could use some assistance.   We have 2 new PAN 3220 firewalls and I have one that is already configured and is connected to our ISP and I would like to connect the second firewall to the same ISP. We have two ports on our ISP router and was wondering if it is possible to connect each firewall to each ISP connection? Would there be any issues in doing this or any issues this would cause? I've read somewhere that ISPs by default do not allow this but the end goal would be to have the firewalls working in Active/Passive so only the primary would be routing at one time (or so i understand).  I should also mention that our WAN IPs is only a /30 from our ISP   I had tried to connect the ISP connection to a temp L2 switch and added both firewall ports and the ISP port into the same VLAN but when both ISPs had the connection traffic was being regularly dropped from the first firewall. The HA cables were connected at the time but not configured, would this have caused the issue? Do you require internet connectivity when setting up HA between the devices?   Apologies if this is lots of questions but I am very confused 🙂 I would appreciate the assistance. Thanks!           ... View more