Fortinet FortiGate-7000, Руководство пользователя

Страница: 5 / 87

Managing individual modules in HA mode 63
Firmware upgrade 64
Session failover (session-pickup) 64
Enabling session pickup for TCP and UDP 65
If session pickup is disabled 65
Primary unit selection and failover criteria 66
Verifying primary chassis selection 68
How link and module failures affect primary chassis selection 68
FIM module failures 70
Management link failures 70
Link failure threshold and board failover tolerance 70
Link failure threshold 70
Board failover tolerance 70
Priority and primary chassis selection 71
Override and primary chassis selection 71
FortiGate-7000 v5.4.5 special features and limitations 72
Managing the FortiGate-7000 72
Default management VDOM 72
Firewall 72
IP Multicast 72
High Availability 73
Shelf Manager Module 73
FortiOS features that are not supported by FortiGate-7000 v5.4.5 74
IPsec VPN tunnels terminated by the FortiGate-7000 74
SSL VPN 75
Traffic shaping and DDoS policies 75
Sniffer mode (one-arm sniffer) 75
FortiGuard Web Filtering 75
Log messages include a slot field 75
FortiOS Carrier 75
Special notice for new deployment connectivity testing 75
FortiGate-7000 v5.4.3 special features and limitations 77
Managing the FortiGate-7000 77
Default management VDOM 77
Firewall 77
Link monitoring and health checking 77
IP Multicast 78
High Availability 78
Shelf Manager Module 79
FortiOS features that are not supported by FortiGate-7000 v5.4.3 79
IPsec VPN tunnels terminated by the FortiGate-7000 79
More about IPsec VPN routing limitations 80