Hello,
We need to create an alarm regarding Fortigate FWs failover. Does anyone have experience with that? I tried to create that using the below trigger action with no success.
Hi ...There are several approaches depending on your setup.
If you use a single management IP for the failover pair, then use of Traps is the approach and you can see some info around that here: https://thwack.solarwinds.com/product-forums/the-orion-platform/f/alert-lab/19355/help-creating-fortinet-fortigate-failover-alert/31705#31705 If, like us, each Fortinet FW has an individual IP then you would need to cerate a UnDP and then create an alert around that. If that is the case, then see my reply here: https://thwack.solarwinds.com/product-forums/network-performance-monitor-npm/f/forum/94373/health-status-in-fortigate-firewall/298737#298737 This works well for us and all you need to do is determine if checking the last 30m works for your environment. Essentially what the alert query does as we have if configured is say 'has the state changed in the last 30 minutes, and if so then consider it failed over' .HTH.