Upgrading the firmware

Installing a new firmware image replaces the current antivirus and attack definitions, along with the definitions included with the firmware release that is being installed. After you install new firmware, make sure that the antivirus and attack definitions are up to date.

Back up your configuration before making any firmware changes.

To upgrade the firmware in the GUI:

1. Log into the FortiGate GUI as the admin administrative user.
2. Go to System > Firmware.
3. Under Latest or All available, select a firmware version, and click Backup config and upgrade.

   Alternately, under Upload Firmware, click Browse and locate the previously downloaded firmware image file (see Downloading a firmware image).

4. Review the warning, and click Continue to initiate the upgrade.

   The FortiGate unit backs up the current configuration to the management computer, uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes.

To upgrade the firmware in the CLI:

1. Make sure that the TFTP server is running.
2. Copy the new firmware image file to the root directory of the TFTP server.
3. Log into the CLI.
4. Ping the TFTP server to ensure that the FortiGate can connect to it:

   execute ping <tftp_ipv4>

5. Enter the following command to copy the firmware image from the TFTP server to the FortiGate unit:

   execute restore image tftp <filename> <tftp_ipv4>

   The FortiGate unit responds with the message:

   This operation will replace the current firmware version!

   Do you want to continue? (y/n)

6. Type y. The FortiGate unit uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes.
7. Reconnect to the CLI.
8. Update the antivirus and attack definitions:

   execute update-now