Skip to main content
kiwibel
New Member
November 14, 2017
Question

Fortimanager redundancy with FQDN

  • November 14, 2017
  • 0 replies
  • 2000 views

Hi,

 

We are looking at implementing DR solution for a Fortimanager VM across two DCs.

I have found it is possible to specify FM with FQDN on the Fortigates.

However, after testing it seems FG caches FM's IP when it is registered.

Then, even if DNS entry changes and TTL expires, the firewall won't query DNS for a new IP for FM. The only solution seems to be manually de-register and register FG again with FM.

 

Is there a way to force Fortigates to query DNS for a Fortimanager when the FG-FM connection goes down?

 

Thanks

 

 

 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!