FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
jintrah_FTNT
Staff
Staff
Article Id 424503
Description This article describes the process followed while upgrading FortiProxy devices in cluster.
Scope FortiProxy.
Solution

By default, FortiProxy cluster has uninterruptible upgrade and sequential upgrade settings enabled. 

proxy.png

 

Default Behavior:

By default, FortiProxy clusters have the following HA settings enabled:

  1. uninterruptible-upgrade: Enabled (minimizes downtime by upgrading subordinates first).
  2. sequential-upgrade: Enabled (upgrades secondary nodes one at a time in larger clusters).

 

Upgrade behavior:

  1. Both enabled (default): The upgrade is done on secondary devices one at a time. After all the secondary devices are upgraded, a new master is chosen among them, followed by the upgrade of the current master.

  2. Sequential-upgrade disabled: The upgrade is done on all secondary devices at once, followed by the upgrade of the current master.

  3. Uninterruptible-upgrade disabled: All the cluster members are upgraded simultaneously (faster but causes full service interruption).

 

Note: This also applies to FortiProxy cluster in config-sync only mode.