Palo Alto Networks Certified Network Security Administrator (PCNSA)Palo Alto Networks Security PlatformMedium
A network architect is designing a highly available network using a pair of Palo Alto Networks firewalls. The design requires that both firewalls actively process traffic, sharing the load, and if one fails, the other seamlessly takes over its traffic. Which High Availability (HA) configuration mode supports this requirement?
- AActive/Passive HA
- BLoad Balancing HA
- CClustered HA
- DActive/Active HA
Show answer & explanationAnswer & explanation
Correct answer: D. Active/Active HA
Active/Active HA allows both firewalls in an HA pair to actively process traffic simultaneously, sharing the load. In case of a failure, the remaining active firewall takes over the full load, ensuring seamless operation.
Why the other options are wrong
- A. Active/Passive HA has one firewall active and one standby; only the active processes traffic.
- B. Load Balancing HA is a general networking concept and not a specific Palo Alto Networks HA mode.
- C. Clustered HA is not a standard Palo Alto Networks HA mode designation.
Active/Active HA
Active/Active High Availability (HA) configuration in Palo Alto Networks firewalls allows both firewalls in a pair to simultaneously process traffic, distributing the load and providing redundancy.
- Both firewalls actively process traffic
- Load sharing between HA peers
- Automatic failover in case of unit failure
- Requires Virtual Routers and usually Virtual Systems for configuration
Memory trick: Active/Active: Both are 'active'ly working, like two busy bees.