PaloAlto Networks PA-1400 Series Hardware Reference Manual page 15

PA-1400 Series Firewall Overview
Item Component
3 HSCI port
4 HA1-A and HA1-B ports
PA-1400 Series Next-Gen Firewall Hardware Reference
Description
The SFP ports can be remapped as
HA-1 ports via PAN-OS or Panorama.
These remapped HA-1 ports offer high
availability connectivity over a longer
distance than what is permitted by the
HA1-A and HA1-B ports listed below.
One SFP+ (10Gbps) port (supports both SFP and
SFP+ transceivers or cables).
Use this port to connect two PA-1400 Series
firewalls in a high availability (HA) configuration as
follows:
• In an active/passive configuration, this port is for
HA2 (data link).
• In an active/active configuration, you can
configure this port for HA2 and HA3. HA3 is
used for packet forwarding for asymmetrically
routed sessions that require Layer 7 inspection
for App-ID and Content-ID.
The HSCI ports must be connected
directly between the two firewalls in the
HA configuration (without a switch or
router between them). When directly
connecting the HSCI ports between
two PA-1400 Series firewalls that are
physically located near each other, Palo
Alto Networks recommends that you
use a passive SFP+ cable.
For installations where the two firewalls
are not near each other and you
cannot use a passive SFP+ cable, use
a standard SFP+ transceiver and the
appropriate cable length.
Two RJ-45 10Mbps/100Mbps/1000Mbps ports for
high availability (HA) control.
15
2022 Palo Alto Networks, Inc.
©