Fortigate HA cluster uninterrupting upgrade

[mhoang]

Hi,

I've just conducted a HA cluster firmware upgrade via FortiManager. During the upgrade, my VPN to the HA cluster was disconnected for 5 minutes. Was this expected behaviour during uninterrupted cluster upgrade? I would expect an uninterrupted upgrade would cause a brief disruption to existing traffic.

FortiOS document mentioned that there might be configuration pending unit reboot which will force both device rebooted at the same time during upgrade. Is there a command that I can check any pending configuration change prior to the firmware upgrade on the units? 

Thanks,

[bkrishnan]

Hi
Hope you are doing well!
Did both the devices got rebooted? As per your point "reboot which will force both device rebooted at the same time during upgrade." If both the devices got rebooted it will not only affect the VPN services.
You can verify the system events for configuration changes but there will be no status of the event to verify was it pending at the time of the issue.

[mhoang]

Hi,

The log showed the pair was updated in a non-disruptive fashion. The secondary was updated first then there was a failover and the primary was updated and there was a failover. However, my VPN still took 5 mins to reconnect to the SSL VPN there.

Thanks,

Minh