Description This article describes additional information about the
'legacy-auth-mode' setting and certificate on OFTP connection checking
on FortiAnalyzer. Scope FortiAnalyzer v7.4.7+, v7.6.3+. Solution In the
FortiAnalyzer v7.4.8 Release Notes, the...
Description This article describes how to detect HTTPS-in-HTTP traffic
on FortiProxy. Scope FortiProxy v7.0.7 or above. Solution Before v7.0.7,
it was not possible to detect HTTPS-in-HTTP traffic. In an explicit web
proxy, if the 'detect-https-in-htt...
Description This article describes one reason why FortiManager is
showing all 0s for the Hit Count in the Policy Package. Scope
FortiManager. Solution FortiGate shows real numbers for the Hit Count in
the firewall policies. However, in some cases, th...
Description This article explains the log rate/log insert speed info in
some FortiAnalyzer CLI commands. Scope FortiAnalyzer. Solution In some
outputs of some FortiAnalyzer CLI commands, there is such log rate info:
diagnose fortilogd lograte last 5 ...
Description This article describes the requirements of a Server
Certificate in an SSL Inspection profile while selecting 'Protecting SSL
Server'. Scope FortiGate. Solution When creating or editing an SSL
Inspection profile, and selecting 'Protecting ...
Then what you can do: 1) Order and apply valid support licenses to the
device with expired licenses. Or 2) Remove the unit with expired
licenses. You can still keep the unit with valid licenses as an HA
member.
There is an option to use a single HA cluster license for both members.
Please check this article:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-The-HA-Cluster-license-requirements/ta-p/325375
As long as the FGT GUI is showing expired licenses (even if one of the
cluster members has valid licenses), it will be treated as having
expired licenses for the whole HA cluster.