Skip to main content
Z
Zeljko_TBS_CRO
New Member
June 29, 2026
Question

Secondary Fortigates can not reach FTP server

  • June 29, 2026
  • 3 replies
  • 45 views

Hello team, I have interesting situation.

 

there are 4xFg900G in cluster. 

there is FTP server in vlan 100.

L3 DG address for that vlan 100 is on Fortigate.

When secondary 900G FGs from cluster want to reach ftp they can not.

We also have cluster of 4xFG 400F for additional services, and they can all reach ftp server , no matter primary or one of 3 secondary FGs

 

How to solve this situation?

My final aim is to upgrade one of secondary FGs regarding MVC (Multi-version cluster) option, set upgrade-mode local-only, and upgrade one of secondaries and then reset ha uptime so that upgraded one become primary. Reason for that is because we must not have any downtime, and we want to take test after upgrade if all services are ok

3 replies

Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
July 3, 2026

Hello Zeljko_TBS_CRO, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Regards,

Jean-Philippe - Fortinet Community Team
sjoshi
Staff
sjoshi
Staff
July 4, 2026

Issue Secondary FG-900G Members Cannot Reach FTP Server
take sniffer on the Sec FGT
diag sniff packet any 'host x.x.x.x and port 21' 4 0 l >> where x.x.x.x is the ftp srv ip
verify the network connectivity from sec fgt

check HA are in sync
you have 3 Sec FGT, is the issue on all 3 Sec FGT or only one?

Thanks, Salon
    Z
    Zeljko_TBS_CROAuthor
    New Member
    July 6, 2026

    Hello, thanks for reply.

    All of 3 secondaries can not reach FTP, and as we need as soon as possible cause, I also opened TAC case. Latest info, developers are checking, might be we are hitting bug.

     

    Br

      Terms & ConditionsAccessibility statement