After a recent high availability (HA) failover test on an active/passive cluster, an engineer noted...

Vendor: Paloalto Networks
Product: NGFW-Engineer
Update on: Jun 13, 2026
Questions: 125

Paloalto Networks NGFW-Engineer Question Answer

After a recent high availability (HA) failover test on an active/passive cluster, an engineer noted a 30-45 second delay before traffic started flowing through a Link Aggregation Control Protocol (LACP) aggregate interface on the newly active firewall.

What should have been configured to support LACP pre-negotiation to minimize LACP convergence delay?

Enable LACP fast failover.

Set LACP mode to passive.

Enable in HA passive state.

Set HA link monitoring to aggressive.