Skip to main content
btey
Staff & Editor
Staff & Editor
July 5, 2022

Technical Tip: HA heartbeat encryption and authentication example

  • July 5, 2022
  • 0 replies
  • 1107 views
Description This article describes the sample of a packet when HA is set with encryption and authentication enabled.
Scope FortiGate HA.
Solution

When encryption and authentication are enabled, the heartbeat message will be transmitted in the ESP protocol. The data will be encrypted and prevent information disclosure. (HA interface is connected to the switch)

 

config system ha

    set authentication enable

    set encryption enable

end

 

  1. The following is an example of a packet when encryption and authentication are disabled (the Default setting): 

TCP703:

 

default_hearbeat.PNG

default_hearbeat.PNG

 

  1. The following is an example of a packet when encryption and authentication are enabled:

ESP protocol:

 

encapsulated.PNG

 

Related article:

Technical Tip: Encryption & Authentication of HA traffic via IKE daemon