best practice on Full HA setup

[LeeBingKang]

Hello Guys,

Recently, i have a question flowed out from my mind on what is the best practice setup of FULL HA:

1. active management and firewall on one of the member

2. active management one of the member and the active firewall will be on another member

Kindly advise and appreciate for your effort.

Thank you.

[G_W_Albrecht]

Out of my experience, i can not recommend Full Management HA Cluster deployment at all. But yes, you would have the active FW on one and primary management on the other node.

[LeeBingKang]

Noted with thanks

[_Val_]

I second what @G_W_Albrecht says 👆🏻, Full HA cannot be considered a best practice in the first place because of certain limitations and complexity.

Now, whether you want to run bot FW and MGMT on the same machine or not, it depends on where you SmartConsole client is located. It may or may not be a good idea to run MGMT on the secondary. From a performance perspective, it does make sense to keep MGMT active on your standby FW node.

[Chris_Atkinson]

Agree with the others, aim to move to a distributed setup if you can then employ HA of the respective components.