A FortiGate device with UTM profiles is reaching the resource limits, and the administrator expects the traffic in the enterprise network to…

The primary goal is to scale performance to handle increased traffic and UTM processing load, as the current FortiGate is reaching its resource limits.

FGCP in active-active mode creates a cluster where all FortiGate devices actively process traffic. This distributes the workload, effectively increasing the total capacity for resource-intensive tasks like UTM inspection.

FGSP with external load balancers is another valid scaling solution. An external load balancer distributes new sessions across the FortiGates, and FGSP (FortiGate Session Life Support Protocol) synchronizes session information between them. This ensures session continuity and stateful inspection, allowing multiple devices to share the processing load.

Both methods achieve the objective of integrating the new FortiGate to handle a higher traffic volume and processing demand.

C. FGCP in active-passive mode and with VDOM disabled: This configuration provides only redundancy (failover). The passive unit is on standby and does not process traffic, so it does not help with resource limitations.

D. VRRP with switches: VRRP (Virtual Router Redundancy Protocol) is an active-passive redundancy protocol for gateway availability. It does not distribute the traffic processing load across multiple devices.

1. FortiOS Administration Guide 7.0.0 | High Availability > Active-active HA (Page 1680): "In active-active (A-A) HA

all FortiGates in the cluster process traffic. The primary unit load balances session-based traffic (such as TCP and UDP) and all IPsec and SSL VPN traffic to all cluster members." This confirms that A-A mode is for load balancing and performance scaling.

2. FortiOS Administration Guide 7.0.0 | High Availability > FortiGate Session Life Support Protocol (FGSP) (Page 1761): "FGSP is a proprietary Fortinet protocol that can be used to synchronize sessions on multiple FortiGates for session failover. FGSP is also used for load balancing... FGSP is intended for use in environments that have other devices

such as load balancers

distributing traffic among a group of FortiGates." This validates the use of FGSP with external load balancers for scaling.

3. FortiOS Administration Guide 7.0.0 | High Availability > Active-passive HA (Page 1679): "In active-passive (A-P) HA

only the primary FortiGate processes traffic. The secondary FortiGate is in standby mode..." This confirms A-P mode is for redundancy

not load sharing.

4. FortiOS Administration Guide 7.0.0 | High Availability > Virtual Router Redundancy Protocol (VRRP) (Page 1777): "VRRP provides active-passive redundancy between two or more FortiGates." This confirms VRRP is for redundancy

not performance scaling.