An administrator has configured a pair of firewalls using high availability in Active/Passive mode. Link and Path Monitoring is enabled with the…

The firewall remains in the Active state because the configured failure conditions are not met. The link group, which contains ethernet1/1 and ethernet1/2, has a Group Failure Condition of "all." This means the link group is only considered "failed" if all its member interfaces go down. In this scenario, only ethernet1/1 has failed, while ethernet1/2 remains operational. Therefore, the link group itself has not failed. Since no monitored object has met its failure criteria, the overall HA Failure Condition of "any" is not triggered, and no failover occurs.

A. Active-Secondary: This is not a valid HA state in Palo Alto Networks firewalls. The primary states are Active, Passive, Suspended, and Non-functional.
B. Non-functional: This state is reserved for critical health failures of the firewall itself (e.g., dataplane failure), not for a link failure in a redundant group.
C. Passive: The firewall would only transition to the Passive state if a failover was triggered. The conditions for a failover were not met in this scenario.

1. Palo Alto Networks PAN-OS® Administrator’s Guide 10.2, "Link and Path Monitoring": This section details the configuration of link groups. It states, "For a link group, you can specify that all links in the group must fail or that any link in the group can fail to trigger a failover." In this question, the condition is "all," which was not met.

2. Palo Alto Networks PAN-OS® Administrator’s Guide 10.2, "HA Concepts" -> "HA Firewall States": This section describes the possible states for a firewall in an HA pair. It confirms that "Active," "Passive," and "Non-functional" are valid states, while "Active-Secondary" is not.

3. Palo Alto Networks PAN-OS® Administrator’s Guide 10.2, "Configure HA Monitoring": This guide explains that the firewall takes action (i.e., fails over) only when the specified failure condition is met. The overall "any" condition applies to the monitored groups (link or path), not the individual interfaces within a group. Since the link group did not fail, the "any" condition is not satisfied.