FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
The article describes an issue with the HA pair not syncing the configuration, and the 'get sys ha status' command Returns all zeros for the secondary device.
Scope
FortiGate.
Solution
When configuring certain interfaces as HBDEV, both the master and slave in the HA cluster experience heartbeat (HB) packet drops, out-of-sync state, and a checksum dump showing all zeros.
Upon investigation, the root cause was identified as the (Virtual routing and forwarding) VRF configuration of the heartbeat interface being set to non-zero.
Note:
For the affected devices, this behavior is fixed in v7.6.3.
