Monday, 19 January 2026

match palo alto firewall settings that are not sync'd by HA

Some settings are not sync'd


show clock

show system info | match timezone

show system ntp-servers

show system setting service-route

show interface management

show high-availability state


Check your software and GP versions match too
  • Timezone mismatch (exactly what you hit)

  • Service routes not identical

  • DNS works on active, fails on passive

  • Management gateway missing on one unit

  • Local admin password mismatch

  • Cert generated on one box only

  • Log discrepancies causing confusion

  • No comments:

    Post a Comment