HA Fortiguard services

[danto]

Hi, I have a HA a-p with 2 Fortigate 110C. My question is this: If the subscription services are not enabled for the passive unit, the whole cluster will have services expired? Best regards, Georgian

[romanr]

Yes - all units need proper licensing....

[danto]

Why is that? The failover unit is always in standby, no traffic flow is going to that unit, is just waiting for the master to fail, is not doing any filtering, anything. That' s robbing...

[rwpatterson]

When the master goes offline, then the slave will come online. Without a subscription, no filtering will work. Is that satisfactory to you? To me it' s more like why bother. You' ll still have to fix the issue at some inconvenient hour.

[danto]

Hi, If the primary unit will fail, I' m ok with no filtering being done. This is just until the primary is online again. This should not be the behaviour!

[rwpatterson]

Fortinet' s hardware, Fortinet' s rules. If you renew your contract and tell them that the units are in HA mode, they do discount your renewal a bit if I recall correctly.

[romanr]

You can use different mechanism to also receive more throughput then just from one box! And - There is always some discounts for clusters, compared to 2 single boxes! Ask your reseller.