NGFW EngineerDemo

By Palo Alto Networks · Question Mode

QuestionQ1

PAN-OS Networking Configuration

In an active/active high-availability (HA) deployment using two PA-Series firewalls, how is the HA3 interface used by the firewalls?

  • A To forward packets to the HA peer during session setup and asymmetric traffic flow
  • B To exchange hellos, heartbeats, HA state information, and management plane synchronization for routing and User-ID information
  • C To synchronize sessions, forwarding tables, IPSec security associations, and ARP tables between firewalls in an HA pair
  • D To perform session cache synchronization among all HA peers having the same cluster ID
Explanation

In active/active HA, the HA3 link enables a firewall to forward packets to its HA peer for session setup and for processing asymmetrically routed traffic, including Layer 7 inspection. HA1 is the control link, HA2 carries state synchronization, and HA4 is used for session-cache synchronization among cluster members.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!