HA Configuration in Palo Alto Firewall | High Availability in Palo Alto | Part 1

In this palo alto firewall video training you will understand HA configuration in palo alto firewall. We will discuss what is ha and why is it required in production environment. In this video i have focused on detailed HA configuration concept this will help you learn the basic understanding of HA and how can we implement that concept of HA configuration in Palo Alto using lab session. We will learn heartbeat timer, link monitoring and path monitoring failover in palo alto. you will how to configure device priority in firewall and how does the active-active and active-passive work. You will also learn what is stateful and stateless failover and how does it trigger.
for all the videos in this series please go to link below.
freshdeveloper...

[@kumaresanvm2873]

Very simple and clear explanation, really awesome 👍 keep going

[@freshdeveloper]

Thanks mate 😊

[@mandarjoshi782]

Im coming back again to watch HA

[@freshdeveloper]

Good to know, it's really helping 😃

[@himanishah5062]

Which protocol used by HA in palo alto for sync and heartbeat like fortinet using FCGP??

[@freshdeveloper]

For High Availability (HA) in Palo Alto Networks firewalls, the protocol used is typically the PAN-OS HA Protocol. This proprietary protocol manages the redundant pair setup between Palo Alto Networks devices. Through this protocol, the primary and secondary firewalls exchange health status and configuration information, ensuring that if the primary firewall fails, the secondary firewall can seamlessly take over network traffic handling. I hope this clarifies your question.

[@muneebraza2145]

you didn't upload the configuration part?

[@freshdeveloper]

You have to follow the video and set it up

[@freshdeveloper]

Yes it wasn't, go through it from link below. kzbin.info/www/bejne/pKjRgKGZdtVribc

[@saimbinmazhar8682]

Checking

[@freshdeveloper]

Check passed

[@himanishah5062]

Who will decide the numerical value for FW??

[@freshdeveloper]

It's usually the SA but technically it depends on the reliability of the firewall and we prefer to make most reliable fw as primary or active

[@vijayamadhavi6788]

Hi sir.. there is no lab for HA…kindly post that video as well

[@freshdeveloper]

Should be there, let me check

[@freshdeveloper]

@vijayamadhavi6788 , yes it wasn't there. Please find link below. kzbin.info/www/bejne/pKjRgKGZdtVribc

[@saimbinmazhar8682]

Checking2

[@freshdeveloper]

Checking passed ✅

[@saimbinmazhar8682]

Check5

[@freshdeveloper]

Passed

[@saimbinmazhar8682]

Check4

[@freshdeveloper]

Check4 is also passed

[@saimbinmazhar8682]

Check3

[@freshdeveloper]

Good to check 😀