An engineer is monitoring an active/active high availability (HA) firewall pair. Which HA firewall state describes the firewall that is currently processing traffic?

The correct answer is D. Active-primary. In an active/active configuration, state of the firewall that connects to User-ID agents, runs DHCP server and DHCP relay, and matches NAT and PBF rules with the Device ID of the active-primary firewall. A firewall in this state can own sessions and set up sessions…

VPN and High Availability

Question

Options

APassive
BInitial
CActive
DActive-primary

How the community answered

(26 responses)

A
4% (1)
D
96% (25)

Explanation

In an active/active configuration, state of the firewall that connects to User-ID agents, runs DHCP server and DHCP relay, and matches NAT and PBF rules with the Device ID of the active-primary firewall. A firewall in this state can own sessions and set up sessions. https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/high-availability/ha-firewall-states

Topics

#active/active HA#firewall states#high availability#active-primary

Community Discussion

No community discussion yet for this question.

Full PCNSC Practice