No config or logic to remove a fortigate that failed to deploy correctly

[exzero16]

If a FortiGate fails to receive its configuration properly (password change failed), the instance is still kept in the autoscaling group instead of being terminated.

The problem with that behavior is that the GWLB health checks still mark the instance as healthy, which means traffic can be forwarded to a FortiGate that is not configured. When that happens, traffic will simply be dropped.

There needs to be some logic or code that will remove fortigate devices that failed during autoscaling.

[lix-fortinet]

Hi @exzero16 ,

Thanks for raising this issue. This issue is complex. We won't be improving this in the next release, as we plan to release soon. But will improve it after that.

Thanks,
Xing