Upgrade Information
Before and after any firmware upgrade
Before any firmware upgrade, save a copy of your FortiSandbox configuration by going to Dashboard > System Configuration > Backup.
After any firmware upgrade, clear the browser cache before logging in to the FortiSandbox to ensure the GUI displays properly.
Upgrading to 3.1.3
FortiSandbox 3.1.3 officially supports upgrading directly from version 3.0.6, 3.1.0, 3.1.1, and 3.1.2.
To upgrade from other versions, see the following table.
|
Upgrading from |
Upgrade path |
|---|---|
|
3.0.0–3.0.5 |
3.0.0–3.0.5 > 3.0.6 > 3.1.3 |
|
2.5.0–2.5.1 |
2.5.0–2.5.1 > 2.5.2 > 3.0.0 > 3.0.6 > 3.1.3 |
|
2.4.0 |
2.4.0 > 2.4.1 > 3.0.0 > 3.0.6 > 3.1.3 |
|
2.3.0–2.3.2 |
2.3.0–2.3.2 > 2.3.3 > 2.4.1 > 2.5.2 > 3.0.0 > 3.0.6 > 3.1.3 |
|
2.2.1 or earlier |
2.2.1 > 2.2.2 > 2.3.0 > 2.3.3 > 2.4.1 > 2.5.2 > 3.0.0 > 3.0.6 > 3.1.3 |
Upgrading cluster environments
In a cluster environment, it is recommended to upgrade the cluster in the following order:
- Worker (slave) devices
- Secondary (primary slave)
- Primary (master)
Upgrade a unit after the previous one fully boots up. Before upgrading, it is highly recommended you set up a cluster level failover IP set, so the failover between primary (master) and secondary (primary slave) can occur smoothly.
Upgrade procedure
From 3.1.0 on, when new firmware is available, the Dashboard displays a blinking New firmware available link next to the Firmware Version. Click New firmware available to go to the FortiSandbox Firmware Information page where you can download and install firmware or manually upload new firmware.
To upgrade FortiSandbox firmware:
- Download the firmware image from the Fortinet Customer Service & Support portal.
- If upgrading using the GUI, go to System > Dashboard . In the System Information widget, click the New firmware available or Update link next to Firmware Version; then use the FortiSandbox Firmware Information or Firmware Upgrade page to upgrade the firmware.
- If upgrading using the CLI, put the firmware image on a host that supports file copy with the SCP or FTP command. FortiSandbox must be able to access the SCP or FTP server.
In a console window, enter the following command string to download and install the firmware image:
fw-upgrade -b -s<SCP/FTP server IP address> -u<user name> -t<ftp|scp> -f<file path>
- Microsoft Windows Sandbox VMs must be activated on the Microsoft activation server. This is done automatically after a system reboot. To ensure the activation is successful, port3 of the system must be able to access the Internet and the DNS servers should be able to resolve the Microsoft activation servers.
Downgrading to previous firmware versions
Downgrading to previous firmware versions is not supported.
FortiSandbox VM firmware
Fortinet provides FortiSandbox VM firmware images for VMware ESXi, Hyper-V, Nutanix, and Kernel Virtual Machine (KVM) virtualization environments.
For more information, see the VM Installation Guide in the Fortinet Document Library.
Firmware image checksums
The MD5 checksums for all Fortinet software and firmware releases are available at the Fortinet Customer Service & Support portal located at https://support.fortinet.com. After logging in select Download > Firmware Image Checksums, enter the image file name including the extension, and select Get Checksum Code.