Upgrading FortiMail firmware in HA mode

This recipe shows how to perform seamless firmware upgrade for all units in an HA cluster, in either active-passive or config-only.

Similar to upgrading the firmware of a standalone FortiMail unit, config-only HA clusters will have normal email processing temporarily interrupted while firmware is being installed on the primary unit. However, if the HA group is active-passive, when the primary unit has its firmware upgraded, the primary unit sends a holdoff command to the secondary unit. This avoids any undue email traffic interruptions, and prevents the secondary unit from taking over the master-role during the primary unit's reboot (unless otherwise specified).

Regardless of whether the HA cluster is in active-passive or config-only mode, the secondary unit/s must always upgrade their firmware before the primary unit.

Upgrade firmware on each FortiMail unit according to the upgrade path specified in the release notes.

For the purpose of this recipe, you should be aware of the following:

• The primary unit has an IP address of 172.20.142.198
• The secondary unit has an IP address of 172.20.142.228
• The units are being upgraded from version 6.2.0 to 6.2.5

For more detailed information on FortiMail units operating as an HA group, see the Using high availability (HA) section of the FortiMail Administration Guide.