title: Palo Alto: High Availability State
agents: snmp
catalog: hw/network/palo_alto
license: GPLv2
distribution: check_mk
description:
 This check monitors the high availability state of a Palo Alto firewall.
 It reads the local HA state (panSysHAState .1.3.6.1.4.1.25461.2.1.2.1.11),
 the peer HA state (panSysHAPeerState .1.3.6.1.4.1.25461.2.1.2.1.12) and the
 HA mode (panSysHAMode .1.3.6.1.4.1.25461.2.1.2.1.13) from the PAN-COMMON-MIB.

 The local state is mapped to a monitoring state; by default "active" and
 "passive" are {OK}, transitional states such as "initial", "tentative",
 "suspended" and "unknown" are {WARN} and "non-functional" is {CRIT}. The
 mapping can be adjusted via the rule "Palo Alto HA State". In addition the
 check goes {WARN} when the local and the peer member report the same state,
 which indicates a split-brain situation.

discovery:
 One service is created when HA is configured (mode is not "disabled").
