In a High Availability configuration operating in Active-Active mode, which of the following correctly describes the path taken by a load-balanced HTTP session?

In FortiGate's Active-Active HA mode, session processing is distributed among cluster members. The Master FortiGate often receives the initial request, performs necessary checks or session assignments, and then load-balances or forwards the session to a Slave FortiGate for the actual processing and egress to the Internet to reach the web server, ensuring traffic distribution.

A single HTTP session would not typically traverse Master -> Slave -> Master again; once a session is assigned to a unit for processing, it usually flows through that unit.

While a Slave FG processes traffic, in a load-balanced scenario coordinated by the master, the path often involves the master's initial role in session distribution, rather than the internal host always directly sending to the slave for initial connection.

Routing through Slave -> Master -> Internet for a single session is not the standard flow in a FortiGate Active-Active load-balanced scenario, as the master typically distributes, or the session is directly handled by one unit.