Define HA Failover Conditions (SCM)

1. Log in to Strata Cloud Manager.
2. Configure a Logical Router or Configure a VLAN to establish the Destination IP addresses you want to monitor.

   Before you enable path monitoring, you must set up your logical routers, VLAN, or a combination of these logical networking components.
3. Configure Active/Passive HA.
4. Select ManageConfigurationNGFW and Prisma AccessOverview and select the Folder Configuration Scope that the HA peers are associated with.
5. In the HA Devices section, edit the HA pair for which you want to define the HA failover conditions.
6. Select the Failover Condition Settings.
7. Configure the failover conditions settings for the Primary Device.

   1. Configure the Link Monitoring Failure Condition.

      1. Select the Failure Condition.
         • All of Link Group (default)—Failover occurs when all Link Groups fail.
         • Any of Link Group—Failover occurs when one or more Link Groups fail.
      2. Click +Link Group and select Link Group Failure Condition for the logical routers you want to monitor.
         • All of Link Group (default)—Failure for a Link Group occurs when the firewall is unable to connect to all Destination IP addresses associated with the Link Group.
         • Any of Link Group—Failure for a Link Group occurs when the firewall is unable to connect to any Destination IP addresses associated with the Link Group.
      3. Select the link groups to monitor.
   2. Configure the Path Monitor Failure Condition.

      1. Select the Failure Condition.
         • All of Path Group (default)—Failover occurs when all Path Groups fail.
         • Any of Path Group—Failover occurs when one or more Path Groups fail.
      2. Click +Path Group and select Link Group Failure Condition for the logical routers you want to monitor.
         • All of Link Group (default)—Failure for a Path Group occurs when the firewall is unable to connect to all Destination IP addresses associated with the Path Group.
         • Any of Link Group—Failure for a Path Group occurs when the firewall is unable to connect to any Destination IP addresses associated with the Path Group.
      3. Select the path groups to monitor.
8. Configure the Link Monitoring Failure Condition and Path Monitoring Failure Condition for the Secondary Device.
9. Save.
10. Push Config to push your configuration changes.