Skip to main content
peter887
New Member
August 2, 2022
Question

FortiGate HA Pair (Active/Passive) FortiOS Upgrade Behaviour

We have a FortiGate HA pair running active/passive in Azure using the Azure SDN connector and managed by FortiManager.

What is the best practise upgrade process, just initiate from FMG? Is there a better way from the FGs directly?

What is the expected behaviour? I’m thinking the active gets upgraded and goes down, passive kicks in, active comes back up and takes over, passive gets upgraded?

Thanks in advance.

1 reply

sjoshi
Staff
Staff
August 2, 2022

Dear peter887,

 

Thank you for posting to the Fortinet Community Forum.

 

Problem Description:-
FortiGate HA Pair (Active/Passive) FortiOS Upgrade Behaviour

As per your description you want to know the best practices for FGT upgrade in HA cluster.

 

Please go through the link for your reference on how firmware upgrade works in HA cluster
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/247944/upgrading-fortigates-in-an-ha-cluster

 

Let us know if this helps.

Thanks

Thanks, Salon
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT