In a high availability cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a slave unit?

This path incorrectly suggests the SYN packet goes through the slave first, then the master, then the Internet; all traffic in active-active HA is initially received by the master.

This path suggests the SYN packet goes directly to the slave from the internal host, bypassing the master entirely, which is incorrect for initial session establishment in FortiGate active-active HA.

This path is identical to choice A and suffers from the same incorrect assumption that the slave receives the initial packet before the master.

In an active-active FortiGate HA cluster, all traffic initially enters the master FortiGate. If the master determines that a session should be offloaded to a slave unit, the initial SYN packet is forwarded from the master to the designated slave unit for processing, which then handles the session directly with the Internet/web server.