Check the cluster synchronization status to make sure the primary and backup FortiGates both have the same configuration.
- Log into the primary FortiGate CLI and enter this command:
diagnose sys ha checksum cluster
- The HA Status dashboard widget also shows synchronization status. Mouse over the host names of each FortiGate in the widget to verify that they are synchronized and both have the same checksum.
- To view more information about the cluster status, click on the HA Status widget and select Configure Settings in System > HA (or go to System > HA).
The command output lists all cluster members' configuration checksums. If both cluster members have identical checksums you can be sure that their configurations are synchronized. If the checksums are different, wait a short while and enter the command again. Repeat until the checksums are identical. It may take a while for some parts of the configuration to be synchronized.
If the checksums never become identical visit the Fortinet Support website for assistance.