Skip to main content
Shyam1
New Member
March 24, 2026
Question

HA config

  • March 24, 2026
  • 7 replies
  • 456 views

Fortigate firewall FG90G HA what are the must keep requirements to be kept ready before HA config including Licenses do I require single or two licenses 

7 replies

Toshi_Esumi
SuperUser
SuperUser
March 24, 2026

Not exactly sure what you're asking. But if you're concerning about UTM/UTP licenses for HA member 90Gs, they all need to have the same license. Only smaller models of 'F'-series have the HA SKU when you buy them in a set so that you need only one UTM/UTP license set.

Toshi 

funkylicious
SuperUser
SuperUser
March 24, 2026
"jack of all trades, master of none"
sw2090
SuperUser
SuperUser
March 24, 2026

I would agree with Toshi including also FortiCare License. That is because either you have both members in action (active-active => Loadbalancing) or just one (active-passive => redundancy) both ones have to have valid licenses for everything to work.

Shyam1
Shyam1Author
New Member
March 25, 2026

thank you for the response. can we use a twinax cable between fortinet FG90G( in HA) and Cisco C9300L-24UXG-4X(stacked switches ) ? i am planning for MMF cables with sfp modules as i dont have free ports in Core Switch 1 

Toshi_Esumi
SuperUser
SuperUser
March 25, 2026

The twinax cable is technically just the type of the cable portion but regularly come with two SFP+s in network application context. Basically the same with DAC cables.
As long as the SFP+ portion's spec matches the 90G's port's, it wouldn't care what kind of cable is attached behind it from FGT's view.

Toshi

Shyam1
Shyam1Author
New Member
March 26, 2026

Any other pre-requisites to be added for HA ? 

 

Full administrative access to the existing Fortinet FortiGate firewall is required.

Access credentials for the Fortinet Support Portal must also be provided.Devices should be registered in same account.

Two FortiGate firewall units of identical model & generation must be provisioned, ensuring consistent hardware specifications and interface naming conventions across both devices.

Each firewall must have equivalent licensing status, with one license per unit, and matching support and subscription terms.

 

Toshi_Esumi
SuperUser
SuperUser
March 26, 2026

well, you listed much more than I regularly concern when I grab two FGTs and set up HA between them. Nothing else I can offer to the check list.

Toshi

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.