Fortiauthenticator 2000E cluster HA upgrade

[TheodoreStark]

Hello, Has anyone had problems with Fortiuathenticator 2000E when upgrading an HA cluster from version 6.3.1, build0682 to version 6.3.4 build0694?

[rbraha]

Hi @TheodoreStark 

Based on the release notes you can upgrade directly to FAC 6.3.4 version,

https://docs2.fortinet.com/document/fortiauthenticator/6.3.4/release-notes/859240/upgrade-instructio...

What error/issue  are you getting after upgrade?

Have you test it to upgrade on newer version of FAC ?

https://docs2.fortinet.com/document/fortiauthenticator/6.6.2/release-notes/33197/upgrading-from-4-x-...

[TheodoreStark]

Hi, @rbraha 

So far, I haven't updated the Fortiauthenticator. The update is necessary to address vulnerabilities, but the company has many users working remotely almost 24 hours a day (all of whom are authorized in Fortiauthenticator). I want to understand what I might encounter if Fortiauthenticator becomes buggy after the update. 

[hokelwo1]

The HA interfaces of the cluster are just directly connected with a patch cable. They are not reachable by my remote load balancer or even at the location where they’re installed. Are you certain about that? I don’t see that in the documentation either. When you configure the load balancer you only set the IP of the standalone primary unit. No reference to the the HA interfaces.

[TheodoreStark]

Hi, @rbraha

So far, I haven't updated the Fortiauthenticator. The update is necessary to address vulnerabilities, but the company has many users working remotely almost 24 hours a day (all of whom are authorized in Fortiauthenticator). I want to understand what I might encounter if Fortiauthenticator becomes buggy after the update.