How-to: Upgrade a FortiGate HA Cluster

I often get asked how well the FortiGates handle firmware upgrades when they're in a high availability cluster. Clients want to know how the upgrade is handled and if there's any 'gotchas' they should be aware of.

Great news is that for the last few years the HA firmware upgrades are very simple and automated. No more manually breaking, upgrading then rejoining the clustered units each time a firmware upgrade is required.

Q&A: Can you transfer FortiTokens from one FortiGate device to another?

The answer is yes. You can request the tokens to be transferred by creating a ticket to Customer Service (not the Technical Help-desk) and asking for tokens A to be transferred from FortiGate B to FortiGate C.

If you're using the FortiToken 200CD then this is not necessary as you should have the seed on a CD. This seed can in turn be installed on multiple FortiGates. You'll only need to request the transfer if you have the FortiToken 200 or the FortiToken Mobile licenses (as the seeds are stored with Fortinet).