FortiEMS HA configure

Question

Dear Concern,

I have purches VON/ZTNA on premise deployment and it is working fine standalone. But I want to need HA configure, at the moment required another license or existing one is enough. How to configure HA any suggestion.

We have purchased FortiClient VPN/ZTNA (on-premises) deployment, and it is currently working fine in standalone mode.

Now we are planning to configure High Availability (HA) and would like clarification on the following:

1. Licensing:

Is an additional license required for HA, or

Can the existing license be used for both primary and secondary nodes?

2. HA Configuration:

What is the recommended HA architecture for on-prem VPN/ZTNA?

Any best-practice guidelines or official documentation for configuring HA?

Any suggestions or real-world experience would be highly appreciated.

Thank you in advance.

ForticlientEMS os version: 7.4.4

#FortiClient #FortiEms @support

AEK · Accepted Answer

Also try update your EMS to 7.4.5, which is a mature version.

AEK · Answer

Hi Amin

You can start with the "EMS HA Deployment Guide":

https://docs.fortinet.com/document/forticlient/7.4.5/ems-ha-deployment-guide/883040/ems-high-availability-ha-concepts

You will find in this guide the different documented architecture types, which are theoretically the supported ones.

On the other hand, according to the above guide, only one license is required, as stated below:

"EMS HA requires a single license for the primary node and the secondary node(s). You only need to add the license to the primary node."

Hope it helps.

Sign up

Login with SSO

Login to the community

Login with SSO