Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
smartgate
New Contributor

Fortigate HA Secondary device Fortiguard update

Hello,

I searched to find out how the Fortigate HA secondary device communicates with and updates the Fortiguard server, but couldn't find a clear answer.
A Fortigate HA cluster uses one VIP and its ARP is maintained by the master device.
So, is it correct that the auxiliary device receives update information through the heartbeat interface?
I would like to know the logic behind Fortigate HA Cluster updating Fortiguard information.

 

Thank you.

1 REPLY 1
srajeswaran
Staff
Staff

Your understanding is correct, only the Primary device connects with Fortiguard and updates the database. Secondary node syncs these db files with Primary node via the HA/Hearbeat link.
If for any reason the sync fails, you will see alerts as below.

secondary's external files are not in sync with the primary's,sequence:1. (type IDS)
secondary's external files are not in sync with the primary's,sequence:3. (type CERT_CA)

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors