FortiGate HA Pair (Active/Passive) FortiOS Upgrade Behaviour

[peter887]

We have a FortiGate HA pair running active/passive in Azure using the Azure SDN connector and managed by FortiManager.

What is the best practise upgrade process, just initiate from FMG? Is there a better way from the FGs directly?

What is the expected behaviour? I’m thinking the active gets upgraded and goes down, passive kicks in, active comes back up and takes over, passive gets upgraded?

Thanks in advance.

[sjoshi]

Dear peter887,

Thank you for posting to the Fortinet Community Forum.

Problem Description:-
FortiGate HA Pair (Active/Passive) FortiOS Upgrade Behaviour

As per your description you want to know the best practices for FGT upgrade in HA cluster.

Please go through the link for your reference on how firmware upgrade works in HA cluster
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/247944/upgrading-fortigates-in-an-ha-clu...

Let us know if this helps.

Thanks