Skip to main content
warev
warev
New Member
March 23, 2024
Question

Fortinet Developer Network Access

  • March 23, 2024
  • 2 replies
  • 1194 views

Is it any difference between A-A and A-P when upgrading? For an example, is it any difference between sessions lost. downtime or the complexity? We have a Active Active setup today and thinking that maybe its better with a Active Passive because every upgrade of firmware is failing, the secondary is succeeding but not the primary and vice versa in next upgrade

2 replies

hbac
Staff
hbac
Staff
March 23, 2024

Hi @warev,

 

There shouldn't be a difference. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HA-upgrade-procedure-and-the-status/ta-p/246692

 

Regards, 

ede_pfau
SuperUser
ede_pfau
SuperUser
March 24, 2024

I don't think that the HA mode will make any difference. I noticed that 'hanging' upgrades are occurring more often in latest releases which is annoying, and hopefully fixed soon. So, it's not only you.

 

One remedy is to make the FGT with the older version the primary, and reinitiate the upgrade. While the image is uploaded, reboot the secondary (such that it is not available for upgrading). The primary then will upgrade and the cluster will form. Worked for me a couple of times doing this remotely...

 

Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!