Skip to main content
Kyra_98
Explorer
October 26, 2025
Question

Fortigate HA out of sync after upgrading to version 7.4.9

  • October 26, 2025
  • 4 replies
  • 3305 views

Hi!

 

I recently updated the firmware of a FortiGate 200F from version 7.2.11 to 7.4.9 and the HA did not finish synchronizing.

There are 2 tables out of sync:

 

  1. system.central-management
  2. firewall.internet-service-name

Any ideas to solve it?

 

 

4 replies

yderek
Staff
Staff
October 26, 2025

@Kyra_98  

run below command on both firewalls 

#diag sys ha checksum recalculate

If still showing not synced , get below output and attach to here on both firewall 

get sys status 

show sys central-management

show firewall internet-service-name

 

Follow this KB how to access the secondary from primary to run the commands 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-access-the-secondary-unit-from-the-primary/ta-p/196091

 

 

AEK
SuperUser
SuperUser
October 26, 2025

Additionally to Derek's advice, I usually get it solved quickly just by rebooting the passive node. This usually works.

AEK
Kyra_98
Kyra_98Author
Explorer
October 26, 2025

@yderek @AEK 

 

Thanks for your responses.

 

I ran the command:
#diag sys ha checksum recalculate

 

And the secondary firewall was also restarted, but it still won't sync with HA.

 

I'm sharing the output from the commands provided.

 

FG_PRIMARY 

FG_SECONDARY 

yderek
Staff
Staff
October 26, 2025

@Kyra_98  Can you login to secondary device and try to added the below part manually first 

 

config sys central-management 

set vdom 'vsys_hamgmt'

end 

 

set vdom 'vsys_hamgmt' --this is the command that is missing from the secondary for the central management part 

This is bit strange as vsys_hamgmt will be the hidden vdom system created for your device automaticlly once you have a dedicated management interface enabled for OOB 

 

Let's see whether above will fix the first table, we come back to your ISDB name mismatch will be require bit troubleshooting 

 

Kyra_98
Kyra_98Author
Explorer
October 27, 2025

I try to run the indicated command but I get the message "entry not found in datasource"

 

FG_SECONDARY (central-management) # set vdom vsys_hamgmt entry not found in datasource  value parse error before 'vsys_hamgmt' Command fail. Return code -3

 

Kyra_98
Kyra_98Author
Explorer
October 27, 2025

I ended up setting "set vdom root" to fix that table and so far it's fine.


But the problem with ISDB remains.