Lesson 7 of 11
Not started

High Availability (HA)

Cluster FortiGates with FGCP for active-passive/active-active failover, understand election and heartbeat, and synchronize config and sessions.

HA clusters two or more identical FortiGates to eliminate single points of failure. Two modes:

  • Active-Passive (A-P): one primary processes all traffic; the subordinate(s) stand by, ready to take over.

  • Active-Active (A-A): the primary also distributes proxy-based inspection sessions to subordinates for load sharing.

Cluster members must match in model, firmware, and (generally) licensing.

In active-passive HA, what does the subordinate unit do during normal operation?