Troubleshooting Tip: HA Out-of-Sync due to 'system.health-check-fortiguard'

After upgrading, administrators may observe that HA units show an out-of-sync status. Upon review, the configuration difference is related to the entry system.health-check-fortiguard, as shown in the HA configuration sync check.


This behavior matches a known bug ID: 1097939 (Console print out '/bin/cmdbsvr...node=system.health-check-fortiguard.name' error messages when restoring a config), which is resolved in v7.6.4. 

To resolve the issue:

Restore the configurations on the Secondary unit by using the configuration backup taken from the Primary unit.

Related documents:

Technical Tip: Correcting an out-of-sync HA cluster by modifying the primary unit configuration file and restoring it to the secondary unit

Resolved issues