topic Re: High Response in FTD Delay in Network Security

High Response in FTD Delay

bibek_deo — Tue, 02 Feb 2021 17:54:14 GMT

HI,

It's taking long time in active/standby FTD switchover,Is there any mechanism to minimize the fail-over time or is there any config required?

Primary Unit to Secondary unit - it takes 5-6 seconds

Secondary Unit to Primary unit - it takes 10-11 seconds

FMC Model- 4500 (Version 6.4.0.9)

FTD - 9300 (Version 6.4.0.9)

Thanks

Bibek

Re: High Response in FTD Delay

TJ-20933766 — Tue, 02 Feb 2021 22:32:27 GMT

You could try tuning down the timers used to detect a failure. Failover Trigger Criteria is located under the High Availability Tab on the devices page

Re: High Response in FTD Delay

bibek_deo — Wed, 03 Feb 2021 15:17:34 GMT

Hi,

I tried to tweak the setting but still issue is same any more insight on this

Thanks

Re: High Response in FTD Delay

TJ-20933766 — Wed, 03 Feb 2021 15:27:04 GMT

Is this a pair of 9300's or is this failover from from security module to the next? Can you provide some details about how your HA is setup?

Re: High Response in FTD Delay

bibek_deo — Wed, 03 Feb 2021 16:47:48 GMT

HI,

The logical device is created on 9300 pair,over which FTD security module is used. FMC(Standalone) is managing FTDs.

I am doing firewall switchover through FMC,

Bibek