Health-Check Servers

Configure health-check servers for the FortiGate unit to verify that real servers are able respond to network connection attempts. If a real server responds to connection attempts, the load balancer continues to send sessions to it. If a real server stops responding to connection attempts, the load balancer assumes that the server is down and does not send sessions to it. The health-check servers configuration determines how the load balancer tests the real servers. You can use a single health-check servers for multiple load balancing configurations.

To add a health-check server:

1. Ensure that you are in the correct ADOM and that central SD-WAN management is enabled.
2. Go to Device Manager > SD-WAN > Health-Check Servers.
3. Click Create New in the content pane toolbar. The Create New WAN Detect Server page opens.

   

4. Enter the following information, then click OK to add the server:

   Name	Enter the name of the WAN detect server.
   Description	Enter a description of the server.
   Detect Server	Enter the IP address of the WAN interface that you want to monitor. Click the plus icon to add more interfaces.
   Per-Device Mapping	Enable per-device mapping. See Per-device mapping.

To edit a health-check server:

1. If using ADOMs, ensure that you are in the correct ADOM.
2. Go to Device Manager > SD-WAN > Health-Check Servers.
3. Select the server from the list and click Edit in the toolbar, or right-click the server then select Edit. The Edit WAN Detect Server page opens.
4. Edit the server as required, then click OK to apply your changes.

To delete a health-check server or servers:

1. If using ADOMs, ensure that you are in the correct ADOM.
2. Go to Device Manager > SD-WAN > Health-Check Servers.
3. Select the server or server s from the list and click Delete in the toolbar, or right-click the server then select Delete.
4. Click OK in the confirmation dialog box to delete the server or servers.

Per-device mapping

Adding a Health-Check Server makes it the default server for all VDOMs on the FortiGate device. With per-device mapping, you can add a different Health-Check Server for each VDOM on the FortiGate device.

To add health-check per-device mapping:

1. Ensure that you are in the correct ADOM and that central SD-WAN management is enabled.
2. Go to Device Manager > SD-WAN > Health-Check Servers.
3. Click Create New in the content pane toolbar. The Create New WAN Detect Server page opens.
4. Enable Per-Device Mapping.
5. Click Create New in the per-device mapping toolbar.

   

6. Select a Mapped Device from the drop-down list.
7. Enter the Detect Server IP address, and add additional detect servers as needed.
8. Click OK.

To edit health-check per-device mapping:

1. If using ADOMs, ensure that you are in the correct ADOM.
2. Go to Device Manager > SD-WAN > Health-Check Servers.
3. Click Create New in the content pane toolbar, or right-click and select Create New. The Create New WAN Detect Server page opens.
4. Select a per device mapping then click Edit in the per-device mapping toolbar.
5. Edit the settings as required, then click OK.

To delete health-check per-device mappings:

1. If using ADOMs, ensure that you are in the correct ADOM.
2. Go to Device Manager > SD-WAN > Health-Check Servers.
3. Click Create New in the content pane toolbar, or right-click and select Create New. The Create New WAN Detect Server page opens.
4. Select one or more per device mapping, then click Delete in the per-device mapping toolbar.
5. Click OK in the confirmation dialog box to delete the mapping or mappings.