Fortigate 600E HA design

[BensonLEI]

Hi, Experts,

I am going to set up the Forti600E HA pair. and would like to configure the active-active mode, any recommendation ?

Many thanks in advance.

[lobstercreed · Accepted solution]

This seems redundant with your other post about HA, and I would offer the same resource to best answer your question:  https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-high-availability/HA_FGCP_best_pract...

[BensonLEI]

Hi, Lobstercreed

Great article, very helpful for understanding Fortinet HA structure and configuration.

Cheers

[AdiMizil]

I will also check this guide. If it makes sense to have 2 VDOMs to split and load balance traffic. Following this guide you can also achieve HA . https://docs.fortinet.com...-two-fortigates-expert Kind regards, Adi

[boneyard]

i would stay away from active-active. it sounds nice but without the two VDOMs it's use is very limited.

with the two VDOMs you create a setup that not many people run which more issues during trouble shooting and a higher chance on bugs.

also keep in mind that with active-active your firewalls still can't be loaded higher then 50% or you have to accept no redundancy.