To avoid split brain scenarios in an active-passive high availability (HA) pair deployment, the management interface can be used as the HA1 backup link. This ensures reliable communication between the HA pair and prevents both firewalls from assuming the active role simultaneously, which can happen if they lose connectivity with each other on the primary HA1 link.
References:
Palo Alto Networks High Availability Guide: HA Configuration
Best Practices for HA Configuration: Avoiding Split Brain
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit