Below is the design we are going to look at: The reason for using vwire was because we wanted the routing protocol to dictate the routing paths. Let the routing protocol do all the failovers and path selecting while the PA sits there and does it’s job with the more security oriented tasks. The “BEFORE” is basically a vwire with no failover option between the PA Firewalls. The PA Firewalls are not aware of each other. In the “AFTER”, we … Continue reading Palo Alto Active/Active vWire Design