PCNSE · Question #790
PCNSE Question #790: Real Exam Question with Answer & Explanation
The correct answer is A: Perform session cache synchronization for all HA cluster members with the same cluster ID.. The HA4 interface is used in Panorama-managed HA clustering (also called an HA cluster or multi-vsys clustering). Its purpose is to perform session cache synchronization across all HA cluster members that share the same cluster ID. This allows any member of the cluster to process
Question
Which function does the HA4 interface provide when implementing a firewall cluster which contains firewalls configured as active-passive pairs?
Options
- APerform session cache synchronization for all HA cluster members with the same cluster ID.
- BPerform synchronization of sessions, forwarding tables, and IPSec security associations between
- CPerform packet forwarding to the active-passive peer during session setup and asymmetric traffic
- DPerform synchronization of routes, IPSec security associations, and User-ID information.
Explanation
The HA4 interface is used in Panorama-managed HA clustering (also called an HA cluster or multi-vsys clustering). Its purpose is to perform session cache synchronization across all HA cluster members that share the same cluster ID. This allows any member of the cluster to process return traffic for a session originally established on a different member, supporting asymmetric routing scenarios across the cluster. HA2 handles synchronization within a single A/P pair, while HA4 extends that synchronization cluster-wide.
Topics
Community Discussion
No community discussion yet for this question.