In order to detect a drop in the high availability of Palo Alto firewalls, it is necessary to detect when the HA value goes to zero. The problem comes when we have active, passive and active-active in the same list. If you apply a generic rule tha...