HA graceful upgrade to FortiOS 5.6.14

Use the following steps to upgrade a FortiGate-6000 or 7000 HA cluster with uninterruptible-upgrade enabled from FortiOS 5.6.12 build 4287 to FortiOS 5.6.14 Build 4292.

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortiGate-6000 or 7000 HA cluster with only minimal traffic interruption. During the upgrade, the secondary FortiGate upgrades first. Then a failover occurs and the newly upgraded FortiGate becomes the primary FortiGate and the firmware of the new secondary FortiGate upgrades.

To perform a graceful upgrade of your FortiGate-6000 or 7000 from FortiOS 5.6.12 to FortiOS 5.6.14:

1. Use the following commands to enable uninterruptible-upgrade to support HA graceful upgrade:

   config system ha

   set session-pickup enable

   set uninterruptible-upgrade enable

   end

2. Download the FortiGate-6000 or 7000 FortiOS 5.6.14 Build 4292 image file from the https://support.fortinet.com FortiGate 5.6.14 firmware image folder.

3. Perform a normal upgrade of your HA cluster.

4. Wait a few minutes, and when the upgrade is complete, verify that you have installed the correct interim firmware version. For example, for the FortiGate-7030E:

   get system status
   Version: FortiGate-7030E v5.6.14,build4292,210806 (GA)
   ...