Troubleshooting Tip: HA out of sync due to IPS sensor configuration mismatch

[jo_rang]

Description	This article includes a troubleshooting tip to fix issues when HA is out of sync due to ips.sensor checksums mismatch
Scope	Fortigate
Solution	From System -> HA, hover the mouse over the Secondary Firewall that is displaying the 'Not Synchronized' error. The tooltip shows that the 'ips.sensor' table is the cause for the HA not being in sync. To fix this, make a small change to one of the Intrusion Prevention Security Profiles. This small change will trigger the configuration synchronization from the Primary FortiGate to the Secondary FortiGate, and this can fix the HA out-of-sync error. Below is an example of a small change that can be applied to the default Intrusion Prevention Profile to detect EICAR files (files that can be used to test Antivirus). Go to Security Profiles -> Intrusion Prevention and edit the default profile. Add a signature to detect (for example: the EICAR File). Select OK and save the profile. After a few minutes, the HA error should clear.