Converting high-availability from active-passive to active-active

[hawada]

Hello,

Is it possible to convert Fortigate mode from active-passive to active-active in a productive network.

thanks

[Carl_Wallmark]

Yes, it´s very easy, just select active-active and click ok.

However, there might be a few seconds of downtime while they are changing mode.

[hawada]

Thanks for your quick reply.

But what about Device priority and override option.

I should modify device priority to be the same on both fortigates?

Thanks

[Carl_Wallmark · Accepted solution]

you still need one high and one low priority. So you can just leave them as is. (I assume you have one high and one low)

Even if you have active-active, the two firewalls will still be "master-slave"

All traffic will hit the master first, then the master will distribute the sessions to it´s slaves.

[hawada]

Thanks again for your support, it is very hepful.