Converting high-availability from active-passive to active-active

Hello,

Is it possible to convert Fortigate mode from active-passive to active-active in a productive network.

thanks

New Member

you still need one high and one low priority. So you can just leave them as is. (I assume you have one high and one low)

Even if you have active-active, the two firewalls will still be "master-slave"

All traffic will hit the master first, then the master will distribute the sessions to it´s slaves.

New Member

Yes, it´s very easy, just select active-active and click ok.

However, there might be a few seconds of downtime while they are changing mode.

New Member

Thanks for your quick reply.

But what about Device priority and override option.

I should modify device priority to be the same on both fortigates?

Thanks

New Member

you still need one high and one low priority. So you can just leave them as is. (I assume you have one high and one low)

Even if you have active-active, the two firewalls will still be "master-slave"

All traffic will hit the master first, then the master will distribute the sessions to it´s slaves.

Sign up