Skip to main content
boneyard
Valued Contributor
Aug 29, 2024 6:31 AM UTC
Question

diagnose debug application sessionsync level

anyone with experience on the diagnose debug for sessionsync (FGSP)?

 

i tried the -1 on 7.2.8 and think I once saw the sync packets on the output, but at the moment I don't see anything when the system is working normally and session sync is working. when i run a resync all command with diagnose test application sessionsync 9 I do get some output, but not during normal operations.

 

another debug level perhaps? i did try a few, but couldn't get any other output to show.

7 replies

mriswan
Staff
Staff
Aug 29, 2024 7:40 AM UTC

Hello @boneyard ,

Have you tried the below debugs?

 

diag debug enable
diag debug console timestamp enable
diag debug application hasync -1
diag debug application hatalk -1

Also, check when was the last time hasync happened using the command "get system ha status"

Translate
boneyard
boneyardAuthor
Valued Contributor
Aug 31, 2024 6:24 AM UTC

thanks will give that a try, but isnt that more for FGCP then FGSP?

Translate
mriswan
Staff
Staff
Sep 4, 2024 6:42 AM UTC

Hello @boneyard , Sorry my bad. The commands I shared are for FGCP.

 

Are you seeing the sync session counts incrementing on the get system ha status output?
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FGSP-Configuration-Guide-for-Session-Sync-and/ta-p/197561

Translate
boneyard
boneyardAuthor
Valued Contributor
Sep 7, 2024 6:16 AM UTC

no as this is FGSP cluster between two standalone firewalls.

 

it is working, but I am wondering about the lack of debug output for the

 

diagnose debug application sessionsync -1

 

command, is that expected.

Translate
Shashwati
Staff
Staff
Sep 7, 2024 1:43 PM UTC

Hello, yes debug for the FGSP is diagnose debug application sessionsync -1

https://community.fortinet.com/t5/FortiGate/Troubleshooting-TIp-FGSP-session-synchronization-ignored-due-to/ta-p/253617

Translate
boneyard
boneyardAuthor
Valued Contributor
Sep 9, 2024 6:20 PM UTC

yeah, im aware of that, the question is what I can expect. with it enabled im not seeing any output when FGSP is sending session sync packets.

Translate
boneyard
boneyardAuthor
Valued Contributor
Feb 15, 2025 9:20 AM UTC

[edit] sorry, wrong question, haven't gotten this worked out. might take another look soon.

Translate
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024