About CTaveras

@Willian I notice that although I set the Passive link state on the Active FW to Auto, the Passive has not sync'd this change.   Is this expected behavior or does the passive device also need this setting?  I read the Doc you linked and it doesnt mention anything about the passive device. ... View more

We will def have 2 ISP but using both simultaniously.   Some one mentioned something about Virtual MAC when in HA...I assume that was for the External interface?   What about the Trusted port does that also get a Virtual MAC? ... View more

First thank you all for the info/Insight great info!!   A few more quetions   1.  Any benefit going Active/Active over Active Passive, Pros and cons? 2.  We have the public and private keys of a trusted Certificate Authority imported into the firewall such that the firewall can issue certificates as that CA.  I’m assuming exporting and importing the config won’t also migrate over certificate information such that we would have redo those configurations on the new firewall. ... View more

@BPry Thank you very much for the response, how does HA handle user traffic passing out if one of the firewalls dies, Do I need to flush arp anywhere or do they keep session tables to some degree? ... View more