Upgrading the firmware

Installing a new firmware image replaces the current antivirus and attack definitions, along with the definitions included with the firmware release that is being installing. After you install new firmware, make sure that the antivirus and attack definitions are up to date.

Back up your configuration before making any firmware changes.

To upgrade the firmware in the GUI:

1. Log into the FortiGate GUI as the admin administrative user.
2. Go to System > Firmware.
3. Under Latest or All Upgrades, select a firmware version, and click Confirm and Backup config.

   If you are upgrading from a mature to a feature firmware version, the Confirm pane opens with a warning message.

4. Review the warning, and click Confirm to continue. A warning message is displayed.
5. Click Continue to initiate the upgrade.

   The FortiGate unit backs up the current configuration to the management computer, uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes.

To upgrade the firmware in the CLI:

1. Make sure that the TFTP server is running.
2. Copy the new firmware image file to the root directory of the TFTP server.
3. Log into the CLI.
4. Ping the TFTP server to ensure that the FortiGate can connect to it:

   execute ping <tftp_ipv4>

5. Enter the following command to copy the firmware image from the TFTP server to the FortiGate unit:

   execute restore image tftp <filename> <tftp_ipv4>

   The FortiGate unit responds with the message:

   This operation will replace the current firmware version!

   Do you want to continue? (y/n)

6. Type y.

   The FortiGate unit uploads the firmware image file, verifies the signature of the firmware image, and determines the firmware maturity level.

   When you are upgrading to a feature firmware image, you are asked to confirm whether to continue with the upgrade.

   When you proceed with the upgrade, the upgrade image is installed and FortiGate restarts. This process takes a few minutes.

   Please wait...
   Connect to tftp server 172.16.200.55 ...
   ##############################################################################
   Get image from tftp server OK.
   Verifying the signature of the firmware image.
   
   Warning: Upgrading to an image with Feature maturity notation.
   Image file uploaded is marked as a Feature image, are you sure you want to upgrade?
   Do you want to continue? (y/n)y
   Please confirm again. Are you sure you want to upgrade using uploaded file?
   Do you want to continue? (y/n)y
   Checking new firmware integrity ... pass
   Please wait for system to restart.
   Firmware upgrade in progress ...
   Done.
   The system is going down NOW !!

7. Reconnect to the CLI.
8. Update the antivirus and attack definitions:

   execute update-now