Created on 02-20-2024 10:31 PM Edited on 09-05-2024 02:24 AM By Jean-Philippe_P
This article describes how to re-join the cluster device correctly after it is added when HA member auto grouping is disabled.
By design, if an HA cluster device is added to FortiAnalyzer it will only need to authorize the Primary, but since the ha-member-auto-grouping is disabled the device acts as individually.
It is possible to confirm after authorization it will counted per device, by the command 'diagnose dvm device list'.
FortiAnalyzer, FortiGate.
There are two ways to add the cluster in the FortiAnalyzer device manager:
The HA Status will show Secondary as a New Device instead of the hostname.
Select the Primary device and add HA Cluster List -> Enable From Existing Devices -> Dropdown will show the Secondary device.
Note:
Refresh the browser whenever changes are made. It is possible to see the cluster with the correct hostname, and it is detected as one device.
Related articles:
Technical Tip: Auto FortiGate HA grouping (based on group name) on FortiAnalyzer
Technical Tip: Criteria for FortiGate HA member to be auto grouping
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.