First, please see the attached network diagram to see what I am trying to do.
On the 2 distribution switches, we run HSRP and have one Fortigate going to SW1 and the other going to SW2.
Then we have vmware esx hosts with connections to each of the fortigates. The fortigates are configured in an active-active ha config as are the vmware vswitches.
Now for some reason, when we disconnect the cable from the monitored wan1 port on either of the fortigates, the ip assigned the a vm on either of the esx hosts fails to be reachable however the ip assigned to the fortigates is reachable just fine. For some reason, traffic isn't being passed through the fortigates.
However, if you look at this diagram, the vm ip is reachable just fine when the devices failover.
I've tried setting different interface tracking options in hsrp and tried using "ip sla" as well to no avail.
Am I missing something somewhere either on the fortigates or on the distro switches?