Upgrading Fabric or managed devices
On the System > Fabric Management page, use the Fabric Upgrade button to select a firmware version from FortiGuard for the FortiGate:
-
When FortiGate is part of a Security Fabric, the selected target firmware is for the root FortiGate as well as all Fabric devices.
-
When the device is a non-Security Fabric FortiGate with managed devices, the selected target firmware version is used to automatically upgrade firmware for all managed devices, such as FortiAP and FortiSwitch devices.
Fabric members or managed devices download the chosen firmware directly from FortiGuard.
When the upgrade requires multiple builds in the upgrade path, you can choose to follow the upgrade path or to upgrade directly from the current version to the selected version.
When you follow the upgrade path, FortiGate automatically completes the upgrades for the Security Fabric or for the managed devices, including any required reboots. This coordinated process is sometimes called a federated update. In this example, the devices automatically upgrade to each firmware in the upgrade path, which is 7.4.2 and then 7.4.3.
|
On managed FortiAP and FortiSwitch devices, the federated upgrade adheres to the respective compatibility matrix information maintained on the FortiGuard Distribution Network (FDN). |
When you choose to skip the upgrade path and directly upgrade to the selected firmware, a message is displayed.
A Fabric Upgrade can be performed immediately or during a scheduled time.
The following options are available in execute federated-upgrade <option>:
|
Option |
Description |
|---|---|
|
cancel |
Cancel the currently configured upgrade. |
|
initialize |
Set up a federated upgrade. |
|
status |
Show the current status of a federated upgrade. |
|
restart |
Restart the currently configured federated upgrade. |
|
|
The Federated upgrade cannot be configured directly. Please use 'execute federated-upgrade ...' to configure. |
To upgrade Fabric or managed devices:
-
Log in to the FortiGate GUI as an administrative user.
When you are upgrading the Security Fabric, you must log in to the root FortiGate.
-
Go to System > Fabric Management and click Fabric Upgrade. The Fabric Upgrade pane opens, and the following tabs are available:
Latest
Displays the latest, available firmware from FortiGuard.
All Upgrades
Displays all available firmware from FortiGuard.
-
Select a firmware version:
- From the Latest or All Upgrades tabs, select a firmware version.
- If the selected firmware version spans multiple builds in the upgrade path, choose one of the following options:
Follow upgrade path
Automatically upgrade devices to each firmware in the upgrade path before upgrade to the selected version. Recommended.
Directly update to v<version and build number>
Bypass the upgrade path to immediately upgrade devices to the selected firmware. A warning message is displayed: Upgrading to FortiOS v<version and build number> directly may result in the loss of configuration.
-
Click Next.
The Choose Schedule options are displayed.
-
Choose when to start the upgrade process.
- Set Upgrade schedule to Immediate or Custom:
Immediate
Select to start the upgrade process immediately.
Custom
Select to display the Upgrade date and time options to schedule when to start the upgrade process.
In a custom upgrade, the configuration backups are saved when the administrator schedules the upgrade. If the scheduled upgrade occurs after further configuration changes are made, the latest changes will not be saved in a new backup configuration file.
-
Click Next. The Review pane is displayed.
- Set Upgrade schedule to Immediate or Custom:
-
Review the firmware updates, and click Confirm and Backup Config to initiate the upgrade process.
The pane enters a loading state to wait for all FortiGate configurations to save. Once completed, the pane closes and the device list refreshes to reflect the latest changes. In this example, the next step is to start the first step in the upgrade path on a schedule.
The Cancel Fabric Upgrade button is also displayed if you want to cancel the upgrade.