In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary…

The traffic does not return to the primary FortiGate after being offloaded to the secondary for processing and then go to the web server; the secondary FortiGate handles the traffic directly once offloaded.

In an active-active HA setup, the client typically sends the initial SYN packet to the primary FortiGate's virtual IP, not directly to a secondary FortiGate.

After offloading, the secondary FortiGate processes the session and sends traffic directly to the web server; it does not send it back to the primary FortiGate first.

In an active-active HA cluster, the primary FortiGate receives all initial connections, and if a session is offloaded, the primary unit redirects the SYN packet to a secondary FortiGate which then processes the session and forwards it directly to the web server. This ensures session load distribution while maintaining a single point of entry for clients.