Enforce firmware version when on-boarding a new FortiAP

You can enforce a firmware version on a FortiAP device using FortiManager.

To enforce a firmware version:

1. Go to AP Manager > Managed APs.
2. Click Create New on the content pane toolbar. The Add FortiAP dialog box opens.

   

3. In the Add FortiAP dialog, configure the settings for your FortiAP device.

   Toggle ON Enforce Firmware Version to enforce a firmware version and select the firmware version from the drop-down menu.

4. Click OK to add your device.
5. In the tree menu under AP Manager > Managed APs, a model FortiAP device is created and added to the managed FortiGate.

   The model FortiAP is displayed as an offline authorized AP.

   

   Once the AP is connected to the FortiGate and appears online, wait around 10 minutes for the enforced firmware to be displayed.

6. Select the AP and click More from the toolbar and select Refresh.

   

   The AP is now online with the enforced firmware version.

   

To enforce a firmware version on an existing FortiAP device:

1. Go to AP Manager > Managed APs.
2. In the tree menu, select the group or FortiGate that contains the FortiAP device to be edited.
3. Locate the FortiAP device in the list in the content pane, or refine the list by selecting an option from the quick status bar.
4. Either select the FortiAP and click Edit from the toolbar, double-click on the FortiAP, or right-click on the FortiAP and select Edit. The Config FortiAP window opens.

   

5. In the Config FortiAP window, edit the FortiAP to set firmware enforcement.

   Once the AP is online, FortiManager enforces the firmware version.