Technical Tip: FortiProxy config-sync cluster upgrade behavior

By default, the sequential-upgrade is enabled.

The command is:

config system ha

    set sequential-upgrade enable

end

The secondary unit will be upgraded first, the same as the a-p mode behavior.

If the config-sync cluster has more than 2 HA members, the new firmware image will be sent by the primary unit to one secondary unit only. Then wait until the secondary unit reboots and joins back to HA cluster. Next, the primary unit will send the image to the next secondary unit.

If sequential-upgrade is disabled, all secondary units will be upgraded at the same time.