Troubleshooting Tip: HA status 'Unknown'

The GUI is showing the HA status as 'Unknown':


The possible causes of this are as follows:

1. The Secondary FortiGate is running a different firmware version:  Run the following commands on both firewalls to confirm the firmware version:

get system status   

Refer to this article for accessing the secondary unit in the cluster: Technical Tip: How to access secondary unit of HA cluster via CLI.

The primary is on v7.4.7 as follows:

cgw-pri-XXXXX-gatech # get system status
Version: FortiGate-61F v7.4.7,build2731,250120 (GA.M) <-----
First GA patch build date: 230509
Security Level: High
Firmware Signature: certified

The secondary is on v7.4.5 as follows:

cgw-sec-XXXX-gatech # get system status
Version: FortiGate-61F v7.4.5,build2702,240916 (GA.M) <-----
First GA patch build date: 230509
Security Level: 2
Firmware Signature: certified

2. If the split-brain is present: See Technical Tip: High Availability - Split Brain.
3. If ha and mgmt interface are used as hbdev ports: See Technical Tip: HA out-of-sync and 'No route to host' error when accessing secondary device from CLI.
4. If it is required to revert the HA cluster to the previous firmware: See Technical Tip: How to revert HA cluster unit to the previous firmware image.
5. If the output of 'di sys ha checksum cluster' only shows the checksum on one device, but 'get system ha status' shows the two units: restart/kill the HASYNC daemon on the Primary Device in the Cluster.
   

fnsysctl killall hasync