Question on FortiGate HA

[enayalogi]

Is it mandatory that replication must be active all the time between primary/active fortigate and secondary/passive fortigate?

If so, why the memory usage and other details are not in sync on both devices? Please explain with some examples. Thank you!

[gfleming]

The backup/secondary FortiGate is not processing traffic or sessions therefore memory and utilization will not match what is on the primary.

What is your concern, exactly? Perhaps you can detail it a bit more?

[parteeksharma]

Hi enayalogi,

Please be informed that cpu and memory utilization depends on the traffic passing through and sessions created on the firewall. In HA active-Passive scenario the traffic is only processed by the primary device and secondary device just do the session sync, so the only primary device is handling the traffic and passing it. Hence the cpu and memory will be different on Primary and secondary.

Regards,
Parteek