Troubleshooting Tip: HA status 'Unknown'

[dkochhar]

Description	This article describes how to resolve the HA status 'Unknown' error.
Scope	FortiGate.
Solution	The GUI is showing the HA status as 'Unknown': The possible causes of this are as follows: The Secondary FortiGate is running a different firmware version:  Run the following commands on both firewalls to confirm the firmware version: get system status    Refer to this article for accessing the secondary unit in the cluster: Technical Tip: How to access secondary unit of HA cluster via CLI. The primary is on v7.4.7 as follows: cgw-pri-XXXXX-gatech # get system status Version: FortiGate-61F v7.4.7,build2731,250120 (GA.M) <----- First GA patch build date: 230509 Security Level: High Firmware Signature: certified The secondary is on v7.4.5 as follows: cgw-sec-XXXX-gatech # get system status Version: FortiGate-61F v7.4.5,build2702,240916 (GA.M) <----- First GA patch build date: 230509 Security Level: 2 Firmware Signature: certified If the split-brain is present: See Technical Tip: High Availability - Split Brain. If ha and mgmt interface are used as hbdev ports: See Technical Tip: HA out-of-sync and 'No route to host' error when accessing secondary device from CLI. If it is required to revert the HA cluster to the previous firmware: See Technical Tip: How to revert HA cluster unit to the previous firmware image. If the output of 'di sys ha checksum cluster' only shows the checksum on one device, but 'get system ha status' shows the two units: restart/kill the HASYNC daemon on the Primary Device in the Cluster. fnsysctl killall hasync