FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
dkochhar
Staff
Staff
Article Id 379822
Description This article describes how to resolve the HA status 'Unknown' error.
Scope FortiGate.
Solution

The GUI is showing the HA status as 'Unknown':

HA-unknown.png
The  possible causes of this are as follows:

  1. The Secondary FortiGate is running a different firmware version:  Run the following commands on both firewalls to confirm the firmware version:


 get system status   

 

Refer to this article for accessing the secondary unit in the cluster: Technical Tip: How to access secondary unit of HA cluster via CLI

 

The primary is on v7.4.7 as follows:


cgw-pri-XXXXX-gatech # get system status
Version: FortiGate-61F v7.4.7,build2731,250120 (GA.M) <------------
First GA patch build date: 230509
Security Level: High
Firmware Signature: certified

 

The secondary is on v7.4.5 as follows:

cgw-sec-XXXX-gatech # get system status
Version: FortiGate-61F v7.4.5,build2702,240916 (GA.M) <---------
First GA patch build date: 230509
Security Level: 2
Firmware Signature: certified

  1. If the split-brain is present: Refer to this KB article for more info on split-brain issue: Technical Tip: High Availability - Split Brain
  2. If ha and mgmt interface are used as hbdev ports: Refer to this KB article for more info: Technical Tip: HA out-of-sync and 'No route to host' error when accessing secondary device from CLI
  3. If it is required to revert the HA cluster to the previous firmware: Refer to this KB article for more info: Technical Tip: How to revert HA cluster unit to the previous firmware image