The document outlines the high availability (HA) concept for Palo Alto firewalls, emphasizing redundancy and business continuity. It describes two HA modes—active/passive and active/active—and outlines the requirements and operational components for each mode. Key aspects include failure detection, timer profiles, and designating active firewalls with specific IP addresses.

1. Palo Alto High Availability Concept
HA Provides
1. Redundancy
2. Business continuity
• If one firewall fails, the other firewall takes over

2. High Availability Modes

3. Active/Passive Mode

4. Active/Active Mode

5. HA Requirements

6. HA Components and Operation
Active/Passive HA Links

7. HA Components and Operation
Active/Passive HA Links

8. Dedicated and on-Dedicated HA Ports

9. HA Backup Links

10. Designating an Active firewall

11. Failure Detection

12. Failure Detection

13. Failure Detection

14. Failure Detection

15. HA Timer Profiles

17. Palo Alto 1
HA1 172.16.16.1
HA2 172.17.17.1
E1/3
E1/4
E1/3
E1/4
Palo alto 2
HA1 172.16.16.2
HA2 172.17.17.2
Palo Alto High Availability LAB