FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
This article describes how to confirm whether a FortiClient EMS instance is a cloned machine.
Scope
FortiClient EMS Linux v7.4.
Solution
In an HA cluster environment, if both pg containers have the same machine ID, it means they were cloned; by access to /etc/machine-id can be confirm such ID in each container. It is necessary that each FortiClient EMS PG containers have a unique machine-id.
'sudo systemd-machine-id-setup' is a command used to initialize or reset the unique machine ID for a Linux system, stored in /etc/machine-id. This is commonly used after cloning a system to ensure each instance has a unique ID, which prevents conflicts with services and logs.
