In a Citrix ADC HA pair, what is required to ensure that traffic is still served if both nodes fail a health check?

• A. Configure HA Fail-safe mode on each Citrix ADC independently.
• B. Disable HA Fail-safe mode on the Primary Citrix ADC only.
• C. Disable HA Fail-safe mode on the Secondary Citrix ADC.
• D. Configure HA Fail-safe mode on the Primary Citrix ADC only.

Answer: (A)

When two Citrix ADCs are in a high-availability pair, health checks determine if each node can keep serving traffic. If every health check fails on both nodes, there would be a complete outage unless a fail-safe mechanism is in place. Enabling Fail-safe mode on each ADC independently ensures that, even when all health checks fail, at least one node continues to handle traffic. Since Fail-safe operates separately on each device, it must be configured on both the Primary and the Secondary to guarantee continuity. Configuring it on only one device wouldn’t protect the pair if that device’s health checks also fail, and disabling it on either unit removes this protection.