Skip to main content
ssriswadpong
Staff & Editor
Staff & Editor
December 31, 2025

Technical Tip: FortiProxy config-sync cluster upgrade behavior

Description This article describes FortiProxy config-sync cluster upgrade behavior.
Scope FortiProxy 7.0 and later.
Solution

By default, the sequential-upgrade is enabled.

 

The command is:

 

config system ha

    set sequential-upgrade enable

end

 

The secondary unit will be upgraded first, the same as the a-p mode behavior.

 

If the config-sync cluster has more than 2 HA members, the new firmware image will be sent by the primary unit to one secondary unit only. Then wait until the secondary unit reboots and joins back to HA cluster. Next, the primary unit will send the image to the next secondary unit.

 

If sequential-upgrade is disabled, all secondary units will be upgraded at the same time.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT