If a network interface is set to be up (what's known as "admin up") but is actually down (a cable is not connected, the device on the other side is down, etc.) it is important to know. Panos-show-interface name: panos-show-interfaceÄescription: Fetch interface information and statistics The traffic statistics of network interfaces can be manually reviewed through the CLI. Tracking the number of packets flowing through each network interface is important to identify potential issues, spikes in traffic, etc. In that output, it looks for the number of packets received through the interface. This alert logs into the Palo Alto Networks firewall through api and retrieves the status of all network interfaces. |See HA1, HA2, or HA3 purposes and configuration options under: and search for your specific HA interface to troubleshoot. |No receive on HA3 is warning state only if in active/active HA. |No receive on HA1 is critical error state. |Keep-alives are recommended to test regular flow. This makes it difficult to keep one firewall active and may cause traffic interruption. |A split-brain scenario can occur if HA interfaces are unable to communicate. No receive traffic on an HA interface can indicate failed connectivity between devices although the interfaces may be UP. If one stops receiving traffic, Indeni will alert. They should all be receiving traffic at all times. HA interfaces not receiving traffic-paloaltonetworks-panosĪ Palo Alto Networks firewall can have up to three HA interfaces.