Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
jgarzaro1
New Contributor

External Connectors

I have two FortiGates running HA Active-Passive mode and also in multi-vdom mode. I created an external threat Feed on the primary and secondary firewalls under the Global Vdom. The threat feed on the primary firewall will connect but the one on the secondary firewall will not. I believe that it has something to do with the way HA management handles this connector. should I be seeing both connect or should it just be on the primary?

1 REPLY 1
xshkurti
Staff
Staff

@jgarzaro1 
When you have HA in Active-Passive, only Active node does manage connectivity to external resources, self-originating traffic (DNS, Updates etc)
This means that if you do a failover and change roles, you will see the same behavior, but with roles changed. Secondary member (now active) will have connectivity, and primary member (now passive) will not have connectivity. In HA Active-Active is different. Here you will see both members connected to these services

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors