Upgrading individual devices
On the System > Firmware & Registration page, select one or more supported devices to display the Upgrade button. Supported devices include FortiGate, FortiAP, FortiExtender, or FortiSwitch. Click the Upgrade button to open the FortiGate Upgrade wizard and complete the following steps:
-
Choose Upgrade Type
-
Select Firmware
-
Choose Schedule
-
Review
To upgrade individual device firmware in the GUI:
-
Log in to the FortiGate GUI as an administrative user.
-
Go to System > Firmware & Registration.
-
Select one or more devices, and click Upgrade to open the FortiGate Upgrade wizard.
The following devices and scenarios are supported:
-
Select one or more FortiGate devices.
-
Select one or more FortiAP devices.
-
Select one or more FortiExtender devices.
-
Select one or more FortiSwitch devices.
-
Select a mix of FortiAP, FortiExtender, and/or FortiSwitch devices.
When upgrading non-FortiGate devices, the wizard opens at the Select Firmware step.
-
-
If the Choose Upgrade Type step is displayed, select FortiGate only, and click Next to proceed to the Select Firmware step.
-
For the Select Firmware step:
-
Select firmware from one of the following tabs:
Recommended
Displays the recommended firmware from FortiGuard.
When FortiGate is running the latest firmware from FortiGuard, the following message is displayed: The firmware is up to date.
All Upgrades
Displays all available firmware from FortiGuard.
When FortiGate is running the latest firmware from FortiGuard, the following message is displayed: No upgrades available.
You can also click the File Upload tab to upload a firmware file that you previously downloaded from the Fortinet Customer Service & Support website.
-
If the selected firmware version spans multiple builds in the upgrade path, choose one of the following options:
Follow upgrade path
Automatically upgrade FortiGate to each firmware in the upgrade path before upgrading to the selected version. Recommended.
FortiGate automatically completes the upgrades, including any required reboots, by downloading the chosen firmware directly from FortiGuard.
Directly update to v<version and build number>
Bypass the upgrade path to immediately upgrade FortiGate to the selected firmware. A warning message is displayed: Upgrading to FortiOS v<version and build number> directly may result in the loss of configuration.
Information about the selected firmware is displayed for you to consider. For example, when upgrading from mature firmware to feature firmware, a warning message appears about the maturity level of the selected firmware for the upgrade. See Firmware maturity levels for more information.
-
Click Next to proceed to the Choose Schedule step.
-
-
For the Choose Schedule step:
-
Choose a schedule:
Immediate
Select to start the upgrade immediately after completing the FortiGate Upgrade wizard.
Specify
Select to schedule a date and time to start the upgrade after completing the FortiGate Upgrade wizard.
-
Click Next to proceed to the Review step.
-
-
For the Review step, review the upgrade plan, and click Confirm and Backup Config to proceed. The Confirm dialog box is displayed.
-
Click Yes to start the upgrade. The Important dialog box is displayed.
-
Read the information and click Close.
-
Use the Firmware Upgrade tray to monitor upgrade progress.
The FortiGate unit backs up the current configuration to the management computer, uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes.
To upgrade individual device firmware in the CLI:
-
Make sure that the TFTP server is running.
-
Copy the new firmware image file to the root directory of the TFTP server.
-
Log in to the CLI.
-
Ping the TFTP server to ensure that the FortiGate can connect to it:
execute ping <tftp_ipv4>
-
Enter the following command to copy the firmware image from the TFTP server to the FortiGate unit:
execute restore image tftp <filename> <tftp_ipv4>
The FortiGate unit responds with the message:
This operation will replace the current firmware version!
Do you want to continue? (y/n)
-
Type
y. The FortiGate unit uploads the firmware image file, verifies the signature of the firmware image, and determines the firmware maturity level.When you are upgrading to a feature firmware image, you are asked to confirm whether to continue with the upgrade.
When you proceed with the upgrade, the upgrade image is installed and FortiGate restarts. This process takes a few minutes.
Please wait... Connect to tftp server 172.16.200.55 ... ############################################################################## Get image from tftp server OK. Verifying the signature of the firmware image. Warning: Upgrading to an image with Feature maturity notation. Image file uploaded is marked as a Feature image, are you sure you want to upgrade? Do you want to continue? (y/n)y Please confirm again. Are you sure you want to upgrade using uploaded file? Do you want to continue? (y/n)y Checking new firmware integrity ... pass Please wait for system to restart. Firmware upgrade in progress ... Done. The system is going down NOW !!
-
Reconnect to the CLI.
-
Update the antivirus and attack definitions:
execute update-now