FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
ldsouza
Staff
Staff
Article Id 337818
Description This article describes how to enable real server health check synchronization to HA passive unit.
Scope FortiWeb v7.6 and above.
Solution

By design Real server health check status will not be synchronized on the HA secondary unit prior version 7.6.0. results in the Real server health status shows down on the secondary unit.

 

For example:

In the HA Active/passive cluster FWEB-A is the Primary unit and FWEB-B is the Secondary unit.

 

FWEBA.png

 

Healthcheck is enabled for Real server 'RS1' and on the primary unit event logs the status shows 'up', but where as on the secondary unit the status shows down on the event logs. 

 

FWEB-A.

 

FWEBA-EVENT.png

 

FWEB-B.

 

FWEBB-EVENT.png

 

Solution:

 

Starting from version 7.6.0 there is an option to synchronize the Real server health-check status from the Primary unit to the Secondary unit.

 

To enable the below command on the Primary unit.

 

FWEB-A # config system ha
FWEB-A (ha) # set hlck-sync enable
FWEB-A (ha) # end

 

After the changes, the Real server health-check status is synchronized on the secondary unit.

 

FWEBB-EVENT 7.6.0.png