Active/active is the preferred solution when the firewall cluster is behind a load balancer that randomizes routing, thus requiring both firewalls to be active.

Active/active usually is the preferred solution because it allows for more bandwidth while both firewalls are up.

Active/active is the preferred solution when the PA-7000 Series is used. Use active/passive with the PA-5200 Series or smaller form factors.