Dear Concern,
I have purches VON/ZTNA on premise deployment and it is working fine standalone. But I want to need HA configure, at the moment required another license or existing one is enough. How to configure HA any suggestion.
We have purchased FortiClient VPN/ZTNA (on-premises) deployment, and it is currently working fine in standalone mode.
Now we are planning to configure High Availability (HA) and would like clarification on the following:
1. Licensing:
Is an additional license required for HA, or
Can the existing license be used for both primary and secondary nodes?
2. HA Configuration:
What is the recommended HA architecture for on-prem VPN/ZTNA?
Any best-practice guidelines or official documentation for configuring HA?
Any suggestions or real-world experience would be highly appreciated.
Thank you in advance.
ForticlientEMS os version: 7.4.4
#FortiClient #FortiEms @support
Hi Amin
You can start with the "EMS HA Deployment Guide":
You will find in this guide the different documented architecture types, which are theoretically the supported ones.
On the other hand, according to the above guide, only one license is required, as stated below:
"EMS HA requires a single license for the primary node and the secondary node(s). You only need to add the license to the primary node."
Hope it helps.
Also try update your EMS to 7.4.5, which is a mature version.
| User | Count |
|---|---|
| 2862 | |
| 1445 | |
| 829 | |
| 820 | |
| 455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.