There's about a 2 second pause in traffic while this happens. When a fail-over occurs, the interfaces are marked as 'up', they negotiate a link with the switch, then do all the ARP stuff.

The VM-Series effectively addresses the security challenges of hybrid and multi-cloud environments as well as branch offices by providing deep visibility and precise control, reducing the attack surface and preventing threats, and automating network security at scale.Īs organizations transition from traditional data center architectures to private clouds, their security teams encounter challenges unique to individual use cases, such as SDN and virtual desktop infrastructure (VDI). The default has the interfaces on the passive firewall marked as 'down' so there's no link with the switch. The broad capabilities of the VM-Series are designed to meet today’s network security challenges, giving teams the power to inspect and control inbound and outbound traffic in public cloud environments as well as define and enforce segmentation and threat prevention policies between trust zones in virtualized data centers and branches. Palo Alto Networks VM-Series Virtual Next-Generation Firewalls provide all the capabilities of our physical NextGeneration Firewalls in a virtual machine (VM) form factor, delivering inline network security and threat prevention to consistently protect public and private clouds, virtualized data centers, and branch locations.

Palo alto virtual firewall