Which component of NGFW is supported in active/passive design but not in active/active design?

The correct answer is A. Single floating IP address. Single floating IP address (also known as a floating IP or shared IP) is supported only in an active/passive HA pair. In active/active HA, both firewalls are forwarding traffic simultaneously and thus do not share a single floating IP. In active/passive HA, a single floating IP a

NGFW High Availability Design

Question

Options

ASingle floating IP address
BUsing a DHCP client
CRoute-based redundancy
DConfiguring ARP load-sharing on Layer 3

How the community answered

(64 responses)

A
73% (47)
B
8% (5)
C
16% (10)
D
3% (2)

Explanation

Single floating IP address (also known as a floating IP or shared IP) is supported only in an active/passive HA pair. In active/active HA, both firewalls are forwarding traffic simultaneously and thus do not share a single floating IP. In active/passive HA, a single floating IP address is used for seamless failover. Active/active HA requires separate IP addresses and does not support a single floating IP. This simplifies failover in active/passive deployments by using a single shared IP that moves to the active peer upon failover.

Topics

#high availability#active/passive HA#floating IP#active/active HA

Community Discussion

No community discussion yet for this question.

Full NETSEC-PRO Practice