Skip to main content
40chris
New Member
July 27, 2024
Question

Fortiproxy Cluster loses Sync approx. every 10 minutes and syncs again

  • July 27, 2024
  • 2 replies
  • 1082 views

I am not sure if this is normal behaviour or a problem?
Our Fortiproxy cluster loses the sync approx. every 10 minutes, then it is out of sync for 1-2 minutes, then it syncs again. I can see it in GUI, on the CLI and also with SNMP.
It is active-passive HA with unicast heartbeat on explicit HA-interfaces in VLAN which is only used for this.
I've already rebootet both devices (VM64 v7.4.2 build0577).
Switchover worked fine.
It is not a network issue!
When I captured the traffic I've not only seen UDP-traffic between the peers, but also TCP on ports 703 and 700.
703 is mentioned in the Fortiproxy port table, but 700 is not in the list (seems to be harelay).
https://docs.fortinet.com/document/fortiproxy/7.4.0/fortiproxy-ports/758533/incoming-ports
Any tipps?
Thanks.

2 replies

AEK
SuperUser
SuperUser
July 28, 2024

There is an issue fixed in FortiOS 7.4.4 that "may" be related to your case.

976160

In a FortiGate HA, the unit periodically produces a warning message for a missing sync file.

 

You can check the HA events to see if this is the same case as yours.

Or you can over the secondary unit under menu System > HA, to see what is not synchronized as the issue occurs.

You can also follow this guide for further troubleshooting (it is for FG but also valid for FortiProxy).

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-troubleshoot-HA-synchronization-issue/ta-p/193422
Hope it helps.

AEK
40chris
40chrisAuthor
New Member
July 28, 2024

Thanks for the hint.
This might be the solution.
I'll check.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!