Palo Alto Networks Certified Network Security Engineer (PCNSE) [pcnse-exam]

Active/active is the preferred solution when the PA-7000 Series is used. Use active/passive with the PA-5200 Series or smaller form factors. Active/active usually is the preferred solution because it allows for more bandwidth while both firewalls are up. Active/active is the preferred solution when the firewall pair is behind a load balancer that randomizes routing, thus requiring both firewalls to be active. Active/active is the preferred solution when the PA-5200 Series or smaller form factors are used. Use active/passive with the PA-7000 Series.