| Where Can I Use This? | What Do I Need? |
|---|
|
|
|
You can configure two firewalls as a branch in active/passive HA mode (or two
firewalls as a hub in active/passive HA mode) to be part of your SD-WAN environment. In this case, Panorama™ needs to push the same
configuration to the active peer and the passive peer, rather than treat the two
firewalls individually. To make that happen, you configure active/passive HA before
adding the devices for SD-WAN, so that Panorama is aware the
devices are HA peers and pushes the same configuration to them. (Only HA
active/passive mode is supported.)
Read through the following procedure before you begin so you don’t Commit after
adding your HA peers as SD-WAN devices.
In HA, the firewall does not synchronize SD-WAN session
distribution statistics. After an HA failover, the session distribution
statistics display only statistics of new sessions; statistics of existing
sessions are lost.
