danto
New Contributor

HA Fortiguard services

Hi, I have a HA a-p with 2 Fortigate 110C. My question is this: If the subscription services are not enabled for the passive unit, the whole cluster will have services expired? Best regards, Georgian
There is no patch for human stupidity...
6 REPLIES 6
romanr
Valued Contributor

Yes - all units need proper licensing....
danto
New Contributor

Why is that? The failover unit is always in standby, no traffic flow is going to that unit, is just waiting for the master to fail, is not doing any filtering, anything. That' s robbing...
There is no patch for human stupidity...
rwpatterson
Valued Contributor III

When the master goes offline, then the slave will come online. Without a subscription, no filtering will work. Is that satisfactory to you? To me it' s more like why bother. You' ll still have to fix the issue at some inconvenient hour.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

danto
New Contributor

Hi, If the primary unit will fail, I' m ok with no filtering being done. This is just until the primary is online again. This should not be the behaviour!
There is no patch for human stupidity...
rwpatterson
Valued Contributor III

Fortinet' s hardware, Fortinet' s rules. If you renew your contract and tell them that the units are in HA mode, they do discount your renewal a bit if I recall correctly.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

romanr
Valued Contributor

You can use different mechanism to also receive more throughput then just from one box! And - There is always some discounts for clusters, compared to 2 single boxes! Ask your reseller.