about the traffic symmetric

[billy1wang]

Hi Sir
wo have three questions about this architecture
1、how to enforce symmetric return ? enable snat ?
2、i deploy this architecture have to use Terraform script ? may i setup two the standalone firewalls and manual set up HA?
3、how to sync the configuration and session between the both firewalls ?

[mobilesuitzero]

Hi billy1wang,

Thanks for contacting Fortinet github.

In regarding to your quesitons.

1. Yes, it's recommended to enable nat.
2. Yes. You deployed this topology with the terraform scripts. It will setup two individual FGT.
3. Can try to setup autoscale between the two, so, the secondary unit will sync the configurations from primary unit.

Hope that helps.

Cheers