To provide redundancy in case of a system or network failure, you can deploy two Panorama™ management servers in a high availability (HA) configuration. Panorama supports an HA configuration in which one peer is the active-primary and the other is the passive-secondary. If a failure occurs on the primary peer, it automatically fails over and the secondary peer becomes active.

(PAN-OS 12.2.0 and later releases) Cross-Hypervisor HA support–– You can deploy Panorama Virtual Appliances in HA across different hypervisors. For example, a primary peer on VMware ESXi and a secondary peer on Microsoft Azure. This capability supports Private–Public, Private–Private, and Public–Public cloud combinations.

Before you configure Panorama for HA, ensure that you review the Panorama HA Prerequisites to prepare your environment. Next, configure the priority and failover on Panorama in HA to manage how the system determines the active peer.

Failovers are initiated by specific failover triggers, which include the following mechanisms:

You can manage a Panorama HA pair through a series of configuration and recovery tasks. First, set up HA on Panorama, which includes securing communication channels by taking the necessary steps to set up authentication using custom certificates between HA peers. After the initial configuration is complete, ensure that you safely test Panorama HA failover to verify that the secondary peer successfully assumes control during an outage.