Filter

Expand All | Collapse All

Next-Generation Firewall Docs

Getting Started
Administration
Networking
Quick Start
Reference
Incidents & Alerts
Release Notes
Select a Document
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 11.0 (EoL)
- PAN-OS 10.2
- PAN-OS 10.1
- PAN-OS 10.0 (EoL)
- PAN-OS 9.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 8.1 (EoL)
Help
Select a Document
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 10.2
- PAN-OS 10.1

Focus

Next-Generation Firewall

Device in HA Pair Transitioned to Unhealthy State

Table of Contents

Filter

Expand All | Collapse All

Next-Generation Firewall Docs

Getting Started
Administration
Networking
Quick Start
Reference
Incidents & Alerts
Release Notes
Select a Document
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 11.0 (EoL)
- PAN-OS 10.2
- PAN-OS 10.1
- PAN-OS 10.0 (EoL)
- PAN-OS 9.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 8.1 (EoL)
Help
Select a Document
- PAN-OS 12.1
- PAN-OS 11.2
- PAN-OS 11.1
- PAN-OS 10.2
- PAN-OS 10.1

Device Restarted

Duplicate IP address detected on an interface

Device in HA Pair Transitioned to Unhealthy State

Incident Code	INC_NGFW_HA_STATE_TRANSITIONED_UNHEALTHY
Severity	Warning
Category	Device
Subcategory	High Availability
Description	This incident triggers when a firewall or Panorama in a high availability (HA) pair transitions to an unhealthy state, such as Initial, Suspended, Non-Functional, or Tentative. These states indicate that the device may be unable to perform normal operations, maintain HA synchronization, or communicate effectively with peers or management systems.
Raise Condition	An alert is triggered when a member of the HA pair transitions into a non-operational state ( Suspended, Non-Functional).
Clear Condition	The alert is cleared when the HA member transitions to a healthy state (Passive, Active, Active-Primary, or Active-Secondary).
Probable Root Cause Incident	"INC_NGFW_HA_FW_NON_FUNCTIONAL_DUE_TO_MODE_MISMATCH", "INC_NGFW_HA_FW_SUSPENDED_PLATFORM_MODEL_MISMATCHES_WITH_PEER", "INC_NGFW_HA_NON_FUNCTIONAL_DU_TO_LINK_DOWN", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_BRDAGENT_EXITING", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_DATAPLANE_DOWN_PATH_MONITOR_FAILURE", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_DEVICE_ID_OVERLAP", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_DP_DOWN", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_DP_DOWN_BRDAGENT_EXISTING", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_DRIVE_ERROR", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_HA1_AP_MISMATCH", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_LICENSE_MISMATCH", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_MULTI_VSYS_MISMATCH", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_PEER_VERSION_OLD", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_POLICY_PUSH_FAIL_TO_DP", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_PREEMPTION_LOOP", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_STATE_SYNC_MISMATCH", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_VENDOR_URL_MISMATCH", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_VERSION_MISMATCH", "INC_NGFW_HA_NON_FUNCTIONAL_DUE_TO_WAITING_POLICY_PUSH_TO_DP", "INC_NGFW_HA_NON_FUNCTIONAL_GROUP_ID_MISMATCH", "INC_NGFW_HA_NON_FUNCTIONAL_HA4_OR_HA4BACKUP_LINK_KEEP_ALIVE_DOWN", "INC_NGFW_HA_PANORAMA_NON_FUNCTIONAL", "INC_NGFW_HA_PANORAMA_NON_FUNCTIONAL_HIGH_PARTITION_USAGE", "INC_NGFW_HA_PANORAMA_SUSPENDED", "INC_NGFW_HA_PANORAMA_SUSPENDED_PRIORITY_MATCHES_WITH_PEER", "INC_NGFW_HA_SUSPENDED_NON_FUNCTIONAL_LOOP_DETECTED", "INC_NGFW_HA_TENTATIVE_LINK_DOWN", "INC_NGFW_HA_TENTATIVE_PATH_DOWN", "INC_NGFW_HA_TENTATIVE_SLOT_DOWN_BRDAGENT_EXITING", "INC_NGFW_HA_TENTATIVE_SLOT_FAILURES", "INC_NGFW_HA_TENTATIVE_SLOT_STATUS_MISMATCH_WITH_PEER", "INC_NGFW_HIGH_PARTITION_USAGE", "INC_NGFW_SUSPENDED_FIPSS_CC_MODE", "INC_NGFW_HA_FW_SUSPENDED_TENTATIVE_LOOP"

Device Restarted

Duplicate IP address detected on an interface