Palo_Alto_Networks
PCNSE · Question #626
Which states will a pair of firewalls be in if their HA Group ID is mismatched?
The correct answer is A. Active/Non-functional. Active/Passive or Active/Active Error state due to a dataplane failure or a configuration mismatch, such as only one firewall configured for packet forwarding, VR sync or QoS sync. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-firewall-states
Submitted by salim_om· Apr 18, 2026Configuration Troubleshooting
Question
Which states will a pair of firewalls be in if their HA Group ID is mismatched?
Options
- AActive/Non-functional
- BActive/Passive
- CInit/Init
- DActive/Active
How the community answered
(28 responses)- A93% (26)
- C4% (1)
- D4% (1)
Explanation
Active/Passive or Active/Active Error state due to a dataplane failure or a configuration mismatch, such as only one firewall configured for packet forwarding, VR sync or QoS sync. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/high-availability/ha-firewall-states
Topics
#High Availability#HA Group ID#HA States#Configuration Troubleshooting
Community Discussion
No community discussion yet for this question.