DOCUMENT LIBRARY

FortiGate-7000E Handbook

What's New
- What's new for FortiGate-7000E 6.4.15
- What's new for FortiGate-7000E 6.4.14
- What's new for FortiGate-7000E 6.4.13
- What's new for FortiGate-7000E 6.4.12
- What's new for FortiGate-7000E 6.4.10
- What's new for FortiGate-7000E 6.4.8
- What's new for FortiGate-7000E 6.4.6
- What's new for FortiGate-7000E 6.4.2
FortiGate-7000E overview
- FortiGate-7060E
- FortiGate-7040E
- FortiGate-7030E
- FIM-7901E interface module
- FIM-7904E interface module
- FIM-7910E interface module
- FIM-7920E interface module
- FPM-7620E processing module
- FPM-7630E processing module
Getting started with FortiGate-7000E
- Confirming startup status
- Configuration synchronization
- FortiGate-7000E dashboard widgets
- Multi VDOM mode
- Security Fabric and Split-Task VDOM mode
- FortiGate-7000E and FortiOS Carrier
- Setting up management connections
  - Adding a password to the admin administrator account
Managing individual FortiGate-7000E FIMs and FPMs
- Special management port numbers
- HA mode special management port numbers
- Managing individual FIMs and FPMs from the CLI
- Connecting to individual FIM and FPM CLIs of the secondary FortiGate-7000E in an HA configuration
Load balancing and flow rules
- Setting the load balancing method
- Flow rules for sessions that cannot be load balanced
- Determining the primary FPM
- FortiOS Carrier GTP load balancing
  - Optimizing NPU GTP performance
  - Enabling GTP load balancing
- ICMP load balancing
- Load balancing TCP, UDP, and ICMP sessions with fragmented packets
- Adding flow rules to support DHCP relay
- Controlling SNAT port partitioning behavior
- Default configuration for traffic that cannot be load balanced
- Showing how the DP2 processor will load balance a session
- Maximum number of flow rules limited by hardware
SSL VPN load balancing
- Setting up SSL VPN using flow rules
FortiGate-7000E IPsec VPN
- IPsec VPN load balancing
- SD-WAN with multiple IPsec VPN tunnels
- Example FortiGate-7000E IPsec VPN VRF configuration
- Troubleshooting
FortiGate-7000E high availability
- Introduction to FortiGate-7000E FGCP HA
- Before you begin configuring HA
- Connect the M1 and M2 interfaces for HA heartbeat communication
  - Default HA heartbeat VLAN triple-tagging
  - HA heartbeat VLAN double-tagging
- Basic FortiGate-7000E HA configuration
- Confirming that the FortiGate-7000E HA cluster is synchronized
  - Viewing more details about HA cluster synchronization
- Primary FortiGate-7000E selection with override disabled (default)
- Primary FortiGate-7000E selection with override enabled
- Failover protection
  - Device failure
  - FIM failure
  - Link failure
  - FPM failure
  - Session failover
  - Primary FortiGate-7000E recovery
- Setting up HA management connections
- HA reserved management interfaces
- HA in-band management for management interfaces
- Virtual clustering
  - Limitations of FortiGate-7000E virtual clustering
  - Virtual clustering VLAN/VDOM limitation
  - Configuring virtual clustering
- HA cluster firmware upgrades
- Distributed clustering
- Modifying heartbeat timing
- Setting a FortiGate-7000E to always be the primary FortiGate-7000E
- Changing how long routes stay in a cluster unit routing table
- Session failover (session-pickup)
- FortiGate-7000E FGSP
  - FortiGate-7000E FortiOS Carrier GTP with FGSP support
  - FGSP session synchronization options
  - Using data interfaces for FGSP session synchronization
  - Synchronizing sessions between FortiGate-7000E FGCP clusters
  - Example FortiGate-7000E FGSP session synchronization with a data interface LAG
  - Example FortiGate-7000E FGSP configuration using 1-M1 interfaces
- Standalone configuration synchronization
- FortiGate-7000E VRRP HA
Operating a FortiGate-7000E
- FortiLink support
- ECMP support
  - VDOM-based session tables
  - IPv4 and IPv6 ECMP load balancing
  - Enabling auxiliary session support
- ICAP support
- SSL mirroring support
- VXLAN support
- FortiGate-7000E IPsec load balancing EMAC VLAN interface limitation
- Global option for proxy-based certificate queries
- Using data interfaces for management traffic
- Setting the MTU for a data interface
- More management connections than expected for one device
- More ARP queries than expected for one device - potential issue on large WiFi networks
- VLAN ID 1 is reserved
- Connecting to module CLIs using the System Management Module
- Remote logging for individual FPMs
  - Some VDOM exception options not supported in HA mode
  - Configuring individual FPMs to send logs to different FortiAnalyzers
  - Configuring VDOMs on individual FPMs to send logs to different FortiAnalyzers
  - Configuring individual FPMs to send logs to different syslog servers
  - Configuring VDOMs on individual FPMs to send logs to different syslog servers
- Firmware upgrade basics
- Verifying that a firmware upgrade is successful
- Installing firmware on individual FIMs or FPMs
  - Upgrading the firmware on an individual FIM
  - Upgrading the firmware on an individual FPM
- Installing FIM firmware from the BIOS after a reboot
- Installing FPM firmware from the BIOS after a reboot
- Synchronizing FIMs and FPMs after upgrading the primary FIM firmware from the BIOS
- Replacing a failed FPM or FIM
- Resolving FIM or FPM boot device I/O errors
  - Formatting an FIM boot device and installing new firmware
  - Formatting an FPM boot device and installing new firmware
- Failover in a standalone FortiGate-7000E
- Adjusting global DP2 timers
- Resetting to factory defaults
- Restarting the FortiGate-7000E
- Packet sniffing for FIM and FPM packets
- Diagnose debug flow trace for FPM and FIM activity
FortiGate-7000E v6.4.15 special features and limitations
FortiGate-7000E v6.4.14 special features and limitations
FortiGate-7000E v6.4.13 special features and limitations
FortiGate-7000E v6.4.12 special features and limitations
FortiGate-7000E v6.4.10 special features and limitations
FortiGate-7000E v6.4.8 special features and limitations
FortiGate-7000E v6.4.6 special features and limitations
FortiGate-7000E v6.4.2 special features and limitations
FortiGate-7000E config CLI commands
FortiGate-7000E execute CLI commands
Change log

Home FortiGate-7000 6.4.15 FortiGate-7000E Handbook

6.4.15

FortiGate-7000E high availability

FortiGate-7000E for FortiOS 6.4 supports the following types of HA operation:

FortiGate Clustering protocol (FGCP)
Virtual clustering (Virtual clustering)
FortiGate Session Life Support Protocol (FGSP) (FortiGate-7000E FGSP)
Standalone configuration synchronization (Standalone configuration synchronization)
Virtual Router Redundancy Protocol (VRRP) (FortiGate-7000E VRRP HA)

FortiGate-7000E high availability

FortiGate-7000E for FortiOS 6.4 supports the following types of HA operation:

FortiGate Clustering protocol (FGCP)
Virtual clustering (Virtual clustering)
FortiGate Session Life Support Protocol (FGSP) (FortiGate-7000E FGSP)
Standalone configuration synchronization (Standalone configuration synchronization)
Virtual Router Redundancy Protocol (VRRP) (FortiGate-7000E VRRP HA)

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

FortiGate-7000E Handbook

FortiGate-7000E high availability

FortiGate-7000E high availability

FortiGate-7000E high availability

FortiGate-7000E high availability