Skip to main content
boneyard
boneyard
Valued Contributor
August 29, 2024
Question

diagnose debug application sessionsync level

  • August 29, 2024
  • 7 replies
  • 3212 views

anyone with experience on the diagnose debug for sessionsync (FGSP)?

 

i tried the -1 on 7.2.8 and think I once saw the sync packets on the output, but at the moment I don't see anything when the system is working normally and session sync is working. when i run a resync all command with diagnose test application sessionsync 9 I do get some output, but not during normal operations.

 

another debug level perhaps? i did try a few, but couldn't get any other output to show.

7 replies

mriswan
Staff
mriswan
Staff
August 29, 2024

Hello @boneyard ,

Have you tried the below debugs?

 

diag debug enable
diag debug console timestamp enable
diag debug application hasync -1
diag debug application hatalk -1

Also, check when was the last time hasync happened using the command "get system ha status"

    boneyard
    boneyardAuthor
    Valued Contributor
    August 31, 2024

    thanks will give that a try, but isnt that more for FGCP then FGSP?

    mriswan
    Staff
    mriswan
    Staff
    September 4, 2024

    Hello @boneyard , Sorry my bad. The commands I shared are for FGCP.

     

    Are you seeing the sync session counts incrementing on the get system ha status output?
    https://community.fortinet.com/t5/FortiGate/Technical-Tip-FGSP-Configuration-Guide-for-Session-Sync-and/ta-p/197561

      boneyard
      boneyardAuthor
      Valued Contributor
      September 7, 2024

      no as this is FGSP cluster between two standalone firewalls.

       

      it is working, but I am wondering about the lack of debug output for the

       

      diagnose debug application sessionsync -1

       

      command, is that expected.

      Shashwati
      Staff
      Shashwati
      Staff
      September 7, 2024

      Hello, yes debug for the FGSP is diagnose debug application sessionsync -1

      https://community.fortinet.com/t5/FortiGate/Troubleshooting-TIp-FGSP-session-synchronization-ignored-due-to/ta-p/253617

      boneyard
      boneyardAuthor
      Valued Contributor
      September 9, 2024

      yeah, im aware of that, the question is what I can expect. with it enabled im not seeing any output when FGSP is sending session sync packets.

      boneyard
      boneyardAuthor
      Valued Contributor
      February 15, 2025

      [edit] sorry, wrong question, haven't gotten this worked out. might take another look soon.

      Terms & ConditionsAccessibility statement
      Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
      Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
      Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!