HA issue

[MustphaBassim]

Hello Dears

I have two firepower devices (HA active/standby) connected to two fortigate firewalls (HA active/standby) when both of the fortigate firewalls are working the HA status become faild while when i stop one of the fortigate devices the HA status become fine anyone have idea about this issue ? take in mind the connection is :

FG1-Port3<-->FP1-Port3

FG1-Port4<-->FP2-port4

FG2-Port3<-->FP1-Port4

FG2-Port4<-->FP2-Port3

[Toshi_Esumi]

That generally wouldn't work for both sides. Cisco doc below indicates FTD's HA seems to work quite similar to FGT's HA. You need to have at least one switch inbetween so that FG1/FG2 port3s and FP1/FP2 port3s are on the same broadcast domain, and same goes with port4s.

https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v...

Toshi