Skip to content

High availability licensing

Active-passive HA

You must activate the licenses on the device you've configured as the initial primary. The licenses are synchronized with the secondary device.

The initial primary device can be the active or the passive device. The behavior is as follows:

  • Initial primary as the passive device: As long as the initial primary device works as the active or passive device, it synchronizes the licenses with the licensing server, and the HA cluster continues to protect the network.
  • Initial primary isn't working: If the initial primary device isn't working and can't synchronize with the licensing server at least once in 90 days, license protection is deactivated.

    For hardware appliances, only the Base Firewall and Enhanced Support license remain active.

    For virtual and software appliances, the Base Firewall license is also deactivated.

For active-passive mode, RMA replacement for the passive firewall under warranty will be provided if you have an Enhanced Plus subscription for the active firewall.

Active-active HA

Both devices carry licenses independently. When either of the devices is working and synchronizes with the licensing server, the HA cluster continues to protect the network.

More information