Skip to main content
mduplessis
mduplessis
New Member
July 4, 2017
Question

Azure: Cluster or no Cluster

  • July 4, 2017
  • 2 replies
  • 6273 views

Hi,

 

I am trying to confirm what if any clustering options are available in Azure when deploying the Fortigate HA Templates.

 

While I understand that true HA is not available I expected at least the ability to cluster to achieve config sync.

 

In my tests last week however , it appeared that trying to select any combination of clustering and saving the config automatically makes the instance unusable and you need to rebuild.

 

Is there anyone on that has experience deploying in Azure.

 

Regards

 

Miron

    2 replies

    nsandone
    nsandone
    New Member
    September 22, 2017

    From what I seen, you can't cluster in Azure due to limitation of how the cloud services works.  For HA to work, IP Addresses would need to move between VMs.  This is not possible in Azure, so Clustering won't work.

    bradhannah
    bradhannah
    New Member
    February 7, 2019

    It does not appear to be any better today. I have installed 6.0.3 and 5.6.6 and neither of them work. 5.6.6 crashes as you described, and 6.0.3 goes split brain and clearly didn't expect to run without an L2 broadcast capability. 

     

    Time to get clever!

    emnoc
    emnoc
    New Member
    February 10, 2019

    This issue is true also in AWS. 

     

    FWIW:  FTNT has address this in these  documents

     

     

    https://www.fortinet.com/content/dam/fortinet/assets/deployment-guides/dg-fortigate-high-availability-azure.pdf

     

    https://www.fortinet.com/...ed_Failover_in_AWS.pdf

    AmanCk
    AmanCk
    New Member
    February 12, 2019

    Hi Team,

     

    i just want to know, if i use the LB on the front of the both firewalls, then HA might be possible.

    for that we will configure the probs,So once the primary will be down in that situation, secondary firewall will not receive any probs from the the Primary unit,In that condition LB will shift the Public IP from the primary to secondary. it will work or not?

    please correct me if i am wrong.

     

    thank you.  

    Terms & ConditionsAccessibility statement