How to monitor HA Status of the Palo Alto firewalls in Network.

  • 18 November 2021
  • 1 reply

Userlevel 2

We would like to get a report of HA Status of all firewalls along with their HA Peer.


Best answer by pradeep.gaddameedi 18 November 2021, 18:19

View original

1 reply

Userlevel 1

Hi Rakesh,


There are multiple possible ways to view HA status of a PaloAlto firewall. 

  • You can use Data View Template that can show the HA status at device level view.
  • You can use Network Intent that can show the HA status diagnosis on Network Intent dashboard for all defined device. 

However, to generate a report of HA status of all firewalls along with their HA peers, you need to use Qapp with below approach. 

  • Parse the required information from the output of “show high-availability state” command then create a table with parsed variables.
    • Example: local device state, local device management ip, peer state, peer management ip
      Using an inbuilt parser to parse required values from command output.


  • Now, create a convert table from the single table operator and then extract it to a CSV report as shown in below.
    Extracting table values into a CSV.


  • Now execute this Qapp against required Map/Site/Firewalls to run it on multiple firewalls then you can export the output CSV file upon successful execution. 

Hope this information is useful.



Community |  Ideas

Facebook |  Instagram |  Youtube |  Twitter |  LinkedIn
Privacy & Security Statement  |  Terms & Conditions |  Impressum  |  UK Modern Slavery Statement