Filter
Top Products
Fortinet 43 FortiWeb 5.0 Patch 6 Administration Guide
See also
• Data that is not synchronized by HA
• Configuring a high availability (HA) FortiWeb cluster
• HA heartbeat & synchronization
Network interfaces
(reverse proxy or
offline
protection
mode only)
or
Bridge
(true transparent
proxy or
transparent
inspection mode
only)
Only the FortiWeb appliance acting as the main appliance, actively
sca
nn
ing web traffic, is configured with IP addresses on its network
interfaces (or bridge).
The standby appliance will only use th
e configured IP addresses if a
failover occurs, and the standby appliance therefore must assume the
role of the main appliance. See “Configuring the network interfaces” on
page 113 or “Configuring a bridge (V-zone)” on page 122.
Management IP
add
res
s
(true transparent
proxy or
transparent
inspection mode
only)
Each FortiWeb appliance in the HA gr
oup
should be configured with
different management IP addresses for administrative purposes. See
“Setting the operation mode” on page 94.
SNMP system
information
Each FortiWeb appliance in the H
A
group will have its own SNMP system
information, including the Description, Location, and Contact. See
“SNMP traps & queries” on page 580.
RAID level RAID settings are hardware-dependent and determined at boot time by
looking
at the drives (for s
oftware RAID) or the controller (hardware RAID),
and are not stored in the system configuration. Therefore, they are not
synchronized. See “RAID level & disk statuses” on page 541.
HA active status
a
nd pr
iority
The HA configuration, which includes Device Priority, is not synchronized
because this configuration must be different on the primary and
secondary a
ppliances.
FortiGuard
Antivirus
packages
This package is large and frequently updated, and therefore is not usually
synchronized for performance reasons. You can, however, force
synchronization. For details, see exec ha sync in the FortiWeb CLI
Reference.
Note: Unless you force an HA sync of this package, the standby may
initially
use an out-of-date package after failover, until it has a chance to
synchronize with FortiGuard. For this reason, you should configure HA
pairs with more frequent FortiGuard update polls. See “Connecting to
FortiGuard services” on page 134.
Setting Explanation