Technical Tip: FortiGate HA Out-of-sync issue on v7.6.3

[akanibek]

Description	This article provides a workaround for the HA Out-of-Sync issue observed on firmware version 7.6.3. The issue can occur in both Active-Active and Active-Passive HA configurations.
Scope	FortiGate v7.6.3 GA.
Solution	Zero-day malware stream scanning NEW, which allows FortiGate devices to receive IOCs using a new daemon ‘fortimq’.  However, this issue causes an out-of-sync state between HA cluster members: The known issue is under investigation, and until it is listed as resolved in a feature release, the feature should be disabled as a workaround: Go under FortiGate Primary GUI -> Security Profiles -> AntiVirus -> Select profile, where the feature is enabled -> Virus Outbreak Prevention, and disable ‘Use 0-day malware stream scanning’. Select 'OK' to save profile changes. If required, manually resynchronize the HA cluster by following the KB article: Technical Tip: Procedure for manual synchronization for HA out-of-sync issue. Note: The fix for this issue will be available on the FortiOS releases v7.6.4 and v8.0.0.