High Availability Active/Passive Support for PA-7500 Series Firewalls
Focus
Focus
What's New in the NetSec Platform

High Availability Active/Passive Support for PA-7500 Series Firewalls

Table of Contents


High Availability Active/Passive Support for PA-7500 Series Firewalls

PA-7500 series firewalls support High Availability active/passive mode through HSCI-based control and data synchronization between active and passive devices.
You can now deploy traditional High Availability active/passive configurations on PA-7500 series firewalls (Generation 5 hardware platform). This capability addresses a critical gap for users who require active/passive failover solutions but cannot use NGFW clustering on these advanced platforms. When you configure traditional HA active/passive on the PA-7500 series firewalls, you maintain similar configuration workflows and operational behaviors that you rely on with legacy HA deployments across other Palo Alto Networks platforms.
Unlike clustering where all members actively forward traffic, HA active/passive mode maintains the traditional model where only the active device processes traffic while the passive device remains in standby, ready to assume the active role during a failover event. You benefit from this approach when you need redundancy without the complexity of traffic distribution across multiple active devices, and when your deployment priorities focus on maintaining existing operational procedures rather than scaling throughput.
The PA-7500 series firewalls on HA active/passive mode leverages the High Speed Chassis Interconnect (HSCI) ports for both HA session setup traffic and configuration synchronization, consolidating the traditional HA1 and HA2 functions into the HSCI-A and HSCI-B interfaces. You can configure this solution without requiring Panorama management, maintaining the same configuration and state synchronization capabilities that exist in current-generation platforms while providing the reliability and performance characteristics of the Generation 5 architecture.
The PA-7500 series firewalls with HA active/passive capability ensures you can migrate to newer hardware platforms without redesigning your high availability architecture, while still gaining access to the enhanced performance and feature capabilities that Generation 5 platforms deliver. This approach particularly suits environments where you require the processing power of modern hardware but must maintain the operational simplicity and predictable behavior patterns of traditional active/passive high availability configurations.