To provide redundancy in case of a system or network failure, you can deploy two Panorama™ management servers in a high availability (HA) configuration. Panorama supports an HA configuration in which one peer is the active-primary and the other is the passive-secondary. If a failure occurs on the primary peer, it automatically fails over and the secondary peer becomes active.

Before you configure Panorama for HA, ensure that you review the Panorama HA Prerequisites to prepare your environment. Next, configure the priority and failover on Panorama in HA to manage how the system determines the active peer.

Failovers are initiated by specific failover triggers, which include the following mechanisms:

You can manage a Panorama HA pair through a series of configuration and recovery tasks. First, set up HA on Panorama, which includes securing communication channels by taking the necessary steps to set up authentication using custom certificates between HA peers. After the initial configuration is complete, ensure that you safely test Panorama HA failover to verify that the secondary peer successfully assumes control during an outage.