An administrator has configured a pair of firewalls using high availability in Active/Passive mode. Link and Path Monitoring is enabled with the Failure Condition set to any. There is one link group c

'Non-functional' is not a standard or typical HA state that a Palo Alto Networks firewall enters due to a single link failure under the specified link monitoring conditions; the firewall remains functional but with reduced interface availability.

The firewall would only transition to the Passive state if a failover occurred, which would require the group failure condition ('all' links down) to be met, causing the *other* firewall in the HA pair to become Active.

'Active-Secondary' is not a valid HA state in an Active/Passive setup; the primary states are typically Active, Passive, or potentially Suspended, not a hybrid active-secondary designation.

The HA link group is configured with a 'Group Failure Condition' set to 'all', which means that a failover will only be triggered if *all* member interfaces (ethernet1/1 and ethernet1/2) within that specific group go down. Since only ethernet1/1 has failed, and ethernet1/2 is presumed to be operational, the 'all' condition for group failure is not met, and thus the Active firewall will remain in the Active state.