{"id":12846,"date":"2016-03-23T05:00:41","date_gmt":"2016-03-23T12:00:41","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=12846"},"modified":"2016-03-23T14:45:50","modified_gmt":"2016-03-23T21:45:50","slug":"achieving-continuous-protection-with-highly-available-next-generation-firewall-deployments","status":"publish","type":"post","link":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/2016\/03\/achieving-continuous-protection-with-highly-available-next-generation-firewall-deployments\/","title":{"rendered":"Achieving Continuous Protection with Highly Available Next-Generation Firewall Deployments"},"content":{"rendered":"<p>Network outages and cyberattacks cause unplanned downtime. And most organizations are seeing dramatic growth both in data center traffic and the use of web-scale ready applications. These trends have resulted in an increased density of business-critical workloads driving requirements for high availability network designs that can handle workload mobility and business continuity.<\/p>\n<p>To ensure highly available and continuous protection of network infrastructures, Palo Alto Networks Next-Generation Security Platform supports active\/passive and active\/active high availability deployment modes. Active\/passive high availability remains the most commonly deployed method of stateful failover for three reasons:<!--more--><\/p>\n<ul>\n<li>Active\/passive (A\/P) designs are simple to implement and maintain over a period of time.<\/li>\n<li>State information associated with all network flows is synchronized with no loss of connectivity between endpoints on either side of the next-generation firewall.<\/li>\n<li>With A\/P high availability implementation, the passive unit can effectively handle the network load in case of active unit failure.<\/li>\n<\/ul>\n<p>In certain networks requiring continuous protection and the ability to handle asymmetric traffic, or run active routing protocols on all firewalls within a high availability configuration, active\/active high availability features can address those requirements.<\/p>\n<p>Palo Alto Networks next-generation firewalls provide comprehensive high availability options with features such as sub-second stateful failover, link and path monitoring capabilities. Organizations have the flexibility to implement advanced high availability deployments in full mesh active\/passive and active\/active failover configurations. This provides customers with continued protection from network-based attacks and secures connectivity to meet today\u2019s business requirements.<\/p>\n<p><strong>For more information, please visit:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/www.paloaltonetworks.com\/documentation\/61\/pan-os\/pan-os\/high-availability\" target=\"_blank\">Palo Alto Networks High Availability Website<\/a><\/li>\n<li><a href=\"https:\/\/www.paloaltonetworks.com\/resources\/techbriefs\/5-reasons-to-enable-high-availability\" target=\"_blank\">5 Reasons Why You Should Consider High Availability Deployment of Next-Generation Firewalls<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Network outages and cyberattacks cause unplanned downtime. And most organizations are seeing dramatic growth both in data center traffic and the use of web-scale ready applications. These trends have resulted in an &hellip;<\/p>\n","protected":false},"author":177,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[5],"tags":[145],"coauthors":[1841],"class_list":["post-12846","post","type-post","status-publish","format-standard","hentry","category-firewall","tag-next-generation-firewall"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/12846","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/users\/177"}],"replies":[{"embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/comments?post=12846"}],"version-history":[{"count":1,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/12846\/revisions"}],"predecessor-version":[{"id":12847,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/12846\/revisions\/12847"}],"wp:attachment":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media?parent=12846"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/categories?post=12846"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/tags?post=12846"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/coauthors?post=12846"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}