FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
btey
Staff & Editor
Staff & Editor
Article Id 214521
Description This article describes the sample of a packet when HA is set with encryption and authentication enabled.
Scope FortiGate HA.
Solution

When encryption and authentication are enabled, the heartbeat message will be transmitted in the ESP protocol. The data will be encrypted and prevent information disclosure. (HA interface is connected to the switch)

 

config system ha

    set authentication enable

    set encryption enable

end

 

  1. The following is an example of a packet when encryption and authentication are disabled (the Default setting): 

TCP703:

 

default_hearbeat.PNG

default_hearbeat.PNG

 

  1. The following is an example of a packet when encryption and authentication are enabled:

ESP protocol:

 

encapsulated.PNG

Related article:

Technical Tip: Encryption & Authentication of HA traffic via IKE daemon