Is it possible to convert Fortigate mode from active-passive to active-active in a productive network.
Go to Solution.
you still need one high and one low priority. So you can just leave them as is. (I assume you have one high and one low)
Even if you have active-active, the two firewalls will still be "master-slave"
All traffic will hit the master first, then the master will distribute the sessions to it´s slaves.
FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
View solution in original post
Yes, it´s very easy, just select active-active and click ok.
However, there might be a few seconds of downtime while they are changing mode.
Thanks for your quick reply.
But what about Device priority and override option.
I should modify device priority to be the same on both fortigates?
Thanks again for your support, it is very hepful.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.