HA active-passive problem

[mafton]

Hi, I have configured 2 fortigate in active-passive mode . I provide all licenses for the Active one (Master) . but it cannot be updated . when i disconnect or shutdown passive from cluster , active can be update immediately . should i buy license for the slave too? what is the problem? thanks .

[billp]

Unless Fortinet has changed policies recently, both units in an HA cluster need to be fully licensed. There is no discount/free ride here, unfortunately. Not sure if this is exactly the problem you are experiencing, though.

[mafton]

thanks billp Is there any reference about this policy?

[Zyndarius]

I am actually experiencing the same problem. HA cluster of two FG620B, master licensed, slave not licensed. Master is unable to automatically update its databases. Is there anybody that can help me with some extra information about the topic. I really need to get 100% reliable information up to the date related to this. Thank you in advance for any possible help.

[romanr]

Hi, as far as I remember this policy was changed either with FortiOS 3 MR7 or with FortiOS 4... So this has been there for some years already, even some of the older softwares still do not check for licenses of all cluster members! I think this policy is at least as old as the 620B device generation! So the reliable information is: with any FortiOS 4, all cluster members need to be licensed in the cluster for the cluster to receive services!! There are massive discounts for clustered installations, but both members need to be purchased together, registered and licensed together... best regards, Roman

[Zyndarius]

Thank you romanr. Now I have the things much clearer.

[rwpatterson]

I have taken 3 devices (2 FGTs and a FAZ) purchased at different times and rolled them into a single clustered contact. Don' t know if my reseller pulled some strings, but we got it. Discount on the second unit (FGT) as well.

[ede_pfau]

AFAIK there' s no cluster rebate on service contracts in Germany (or, any more). But in Austria and NL.

[FortiRack_Eric]

There' s no bundel / fortiguard contract discount for HA units in NL (nowhere as far as I know).

[romanr]

(nowhere as far as I know).

Here in Austria there is a discount for clustered installations and renewals >= 110C ...