FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Virtual clustering is an extension of the FGCP for FortiGate units operating with virtual domains. Virtual clustering operates in active-passive mode to provide failover protection between two instances of a virtual domain operating on two different cluster units. By distributing virtual domain processing between the two cluster units you can also configure virtual clustering to provide load balancing between the cluster units.
Virtual clustering operates on two (and only two) FortiGate units with virtual domains enabled. Each virtual domain creates it own cluster. All traffic to and from the virtual domain stays within the virtual domain and is processed by the virtual domain. One cluster unit is the primary unit for each virtual domain and the other cluster unit is the subordinate unit for each virtual domain. The primary unit processes all traffic for the virtual domain. The subordinate unit does not process traffic for the virtual domain.
See also the following documents at http://docs.forticare.com/fgt.html :
