A design consideration for a prospect who wants to deploy VM-Series firewalls in an Amazon Web

Services (AWS) environment is that only active-passive high availability (HA) is supported. High

availability (HA) is a feature that provides redundancy and failover protection for firewalls in case of

hardware or software failure. Active-passive HA is a mode of HA that consists of two firewalls in a

pair, where one firewall is active and handles all traffic, while the other firewall is passive and acts as

a backup. Active-passive HA is the only mode of HA that is supported for VM-Series firewalls in an

AWS environment, due to the limitations of AWS networking and routing. Active-active HA, which is

another mode of HA that consists of two firewalls in a pair that both handle traffic and synchronize

sessions, is not supported for VM-Series firewalls in an AWS environment. A design consideration for

a prospect who wants to deploy VM-Series firewalls in an AWS environment is not that special AWS

plugins are needed for load balancing, resources are shared within the cluster, or high availability

(HA) clusters are limited to fewer than 8 virtual appliances, as those are not valid or relevant factors

for firewall deployment in an AWS environment. Reference: Palo Alto Networks Certified Software

Firewall Engineer (PCSFE), [High Availability Overview], [High Availability on AWS]