Fortigate HA Secondary device Fortiguard update

[smartgate]

Hello,

I searched to find out how the Fortigate HA secondary device communicates with and updates the Fortiguard server, but couldn't find a clear answer.
A Fortigate HA cluster uses one VIP and its ARP is maintained by the master device.
So, is it correct that the auxiliary device receives update information through the heartbeat interface?
I would like to know the logic behind Fortigate HA Cluster updating Fortiguard information.

Thank you.

[srajeswaran]

Your understanding is correct, only the Primary device connects with Fortiguard and updates the database. Secondary node syncs these db files with Primary node via the HA/Hearbeat link.
If for any reason the sync fails, you will see alerts as below.

secondary's external files are not in sync with the primary's,sequence:1. (type IDS)
secondary's external files are not in sync with the primary's,sequence:3. (type CERT_CA)