Question on FortiGate HA

Hi satavkupa.

The following are requirements for setting up an HA cluster (FGCP) or FGSP peers.

Cluster members must have:
The same model.
The same hardware configuration.
The same connections.
The same generation.
+ https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/946059/troubleshoot-an-ha-formation 

Please check if the above conditions are met. Also, when synchronizing between two devices, in-sync may not work because the checksums do not match.

# diag sys ha checksum list <- Compare and check this part on each device. 

Please refer to this.
+ https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-HA-synchronization-issue-cluster-out-of-sync/ta-p/193422 

Thanks.

Hi,
FortiGate HA clusters prioritize redundancy, high availability, and load balancing of network traffic over the synchronization of CPU and memory usage.
Each unit in the cluster manages its own resources independently to ensure optimal performance and failover capabilities.

Hi @satavkupa, 

In HA active/passive scenario, only the primary unit handles the traffic and inspections. Hence it's CPU/memory usage is expected to be higher than the secondary. I hope that answers your question. 

Regards,