Fortinet black logo

Upgrade information

Upgrade information

This section provides upgrade information for upgrading your FortiGate-6000 or 7000 to FortiOS 5.6.12. See also Upgrade Information in the FortiOS 5.6.12 Release Notes.

FortiGate-6000 upgrade information

FortiGate-6000 for FortiOS 5.6.12 supports upgrading from FortiGate-6000 for FortiOS 5.6.11 build 4279.

For a FortiGate-6000 HA configuration, you can enable uninterruptible upgrade.

config system ha

set uninterruptible-upgrade enable

end

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortGate-6000 HA configuration with only minimal traffic interruption. During the upgrade, the secondary FortiGate-6000 upgrades first. Then a failover occurs and the newly upgraded FortiGate-6000 becomes the primary FortiGate-6000 and the firmware of the new secondary FortiGate-6000 upgrades.

The management board and the FPCs in your FortiGate-6000 system run the same firmware image. You upgrade the firmware from the management board GUI or CLI just as you would any FortiGate product.

You can perform a graceful firmware upgrade of a FortiGate-6000 FGCP HA cluster by enabling uninterruptible-upgrade and session-pickup. A graceful firmware upgrade only causes minimal traffic interruption. For more information about graceful HA upgrades, see HA cluster firmware upgrades.

Upgrading the firmware of a standalone FortiGate-6000, or FortiGate-6000 HA cluster with uninterrupable-upgrade disabled interrupts traffic because the firmware running on the management board and all of the FPCs upgrades in one step. These firmware upgrades should be done during a quiet time because traffic will be interrupted during the upgrade process.

A firmware upgrade takes a few minutes, depending on the number of FPCs in your FortiGate-6000 system. Some firmware upgrades may take longer depending on factors such as the size of the configuration and whether an upgrade of the DP3 processor is included.

Before beginning a firmware upgrade, Fortinet recommends that you perform the following tasks:

  • Review the latest release notes for the firmware version that you are upgrading to.
  • Verify the recommended upgrade path, as documented in the release notes.
  • Back up your FortiGate-6000 configuration.
Note

Fortinet recommends that you review the services provided by your FortiGate-6000 before a firmware upgrade and then again after the upgrade to make sure that these services continue to operate normally. For example, you might want to verify that you can successfully access an important server used by your organization before the upgrade and make sure that you can still reach the server after the upgrade and performance is comparable. You can also take a snapshot of key performance indicators (for example, number of sessions, CPU usage, and memory usage) before the upgrade and verify that you see comparable performance after the upgrade.

FortiGate-7000 upgrade information

FortiGate-7000 5.6.12 supports upgrading from FortiGate-7000 for FortiOS 5.6.11 build 4279.

For a FortiGate-7000 HA configuration, you can enable uninterruptible upgrade.

config system ha

set uninterruptible-upgrade enable

end

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortGate-7000 HA configuration with only minimal traffic interruption. During the upgrade, the secondary FortiGate-7000 upgrades first. Then a failover occurs and the newly upgraded FortiGate-7000 becomes the primary FortiGate-7000 and the firmware of the new secondary FortiGate-7000 upgrades.

All of the FIMs and FPMs in your FortiGate-7000 system run the same firmware image. You upgrade the firmware from the primary FIM GUI or CLI just as you would any FortiGate product.

You can perform a graceful firmware upgrade of a FortiGate-7000 FGCP HA cluster by enabling uninterruptible-upgrade and session-pickup. A graceful firmware upgrade only causes minimal traffic interruption. For more information about graceful HA upgrades, see HA cluster firmware upgrades.

Upgrading the firmware of a standalone FortiGate-7000, or FortiGate-7000 HA cluster with uninterrupable-upgrade disabled interrupts traffic because the firmware running on the FIMs and FPMs upgrades in one step. These firmware upgrades should be done during a quiet time because traffic will be interrupted during the upgrade process.

A firmware upgrade takes a few minutes, depending on the number of FIMs and FPMs in your FortiGate-7000 system. Some firmware upgrades may take longer depending on factors such as the size of the configuration and whether an upgrade of the DP2 processor is included.

Before beginning a firmware upgrade, Fortinet recommends that you perform the following tasks:

  • Review the latest release notes for the firmware version that you are upgrading to.
  • Verify the recommended upgrade path as documented in the release notes.
  • Back up your FortiGate-7000 configuration.
Note

Fortinet recommends that you review the services provided by your FortiGate-7000 before a firmware upgrade and then again after the upgrade to make sure the services continues to operate normally. For example, you might want to verify that you can successfully access an important server used by your organization before the upgrade and make sure that you can still reach the server after the upgrade, and performance is comparable. You can also take a snapshot of key performance indicators (for example, number of sessions, CPU usage, and memory usage) before the upgrade and verify that you see comparable performance after the upgrade.

Upgrade information

This section provides upgrade information for upgrading your FortiGate-6000 or 7000 to FortiOS 5.6.12. See also Upgrade Information in the FortiOS 5.6.12 Release Notes.

FortiGate-6000 upgrade information

FortiGate-6000 for FortiOS 5.6.12 supports upgrading from FortiGate-6000 for FortiOS 5.6.11 build 4279.

For a FortiGate-6000 HA configuration, you can enable uninterruptible upgrade.

config system ha

set uninterruptible-upgrade enable

end

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortGate-6000 HA configuration with only minimal traffic interruption. During the upgrade, the secondary FortiGate-6000 upgrades first. Then a failover occurs and the newly upgraded FortiGate-6000 becomes the primary FortiGate-6000 and the firmware of the new secondary FortiGate-6000 upgrades.

The management board and the FPCs in your FortiGate-6000 system run the same firmware image. You upgrade the firmware from the management board GUI or CLI just as you would any FortiGate product.

You can perform a graceful firmware upgrade of a FortiGate-6000 FGCP HA cluster by enabling uninterruptible-upgrade and session-pickup. A graceful firmware upgrade only causes minimal traffic interruption. For more information about graceful HA upgrades, see HA cluster firmware upgrades.

Upgrading the firmware of a standalone FortiGate-6000, or FortiGate-6000 HA cluster with uninterrupable-upgrade disabled interrupts traffic because the firmware running on the management board and all of the FPCs upgrades in one step. These firmware upgrades should be done during a quiet time because traffic will be interrupted during the upgrade process.

A firmware upgrade takes a few minutes, depending on the number of FPCs in your FortiGate-6000 system. Some firmware upgrades may take longer depending on factors such as the size of the configuration and whether an upgrade of the DP3 processor is included.

Before beginning a firmware upgrade, Fortinet recommends that you perform the following tasks:

  • Review the latest release notes for the firmware version that you are upgrading to.
  • Verify the recommended upgrade path, as documented in the release notes.
  • Back up your FortiGate-6000 configuration.
Note

Fortinet recommends that you review the services provided by your FortiGate-6000 before a firmware upgrade and then again after the upgrade to make sure that these services continue to operate normally. For example, you might want to verify that you can successfully access an important server used by your organization before the upgrade and make sure that you can still reach the server after the upgrade and performance is comparable. You can also take a snapshot of key performance indicators (for example, number of sessions, CPU usage, and memory usage) before the upgrade and verify that you see comparable performance after the upgrade.

FortiGate-7000 upgrade information

FortiGate-7000 5.6.12 supports upgrading from FortiGate-7000 for FortiOS 5.6.11 build 4279.

For a FortiGate-7000 HA configuration, you can enable uninterruptible upgrade.

config system ha

set uninterruptible-upgrade enable

end

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortGate-7000 HA configuration with only minimal traffic interruption. During the upgrade, the secondary FortiGate-7000 upgrades first. Then a failover occurs and the newly upgraded FortiGate-7000 becomes the primary FortiGate-7000 and the firmware of the new secondary FortiGate-7000 upgrades.

All of the FIMs and FPMs in your FortiGate-7000 system run the same firmware image. You upgrade the firmware from the primary FIM GUI or CLI just as you would any FortiGate product.

You can perform a graceful firmware upgrade of a FortiGate-7000 FGCP HA cluster by enabling uninterruptible-upgrade and session-pickup. A graceful firmware upgrade only causes minimal traffic interruption. For more information about graceful HA upgrades, see HA cluster firmware upgrades.

Upgrading the firmware of a standalone FortiGate-7000, or FortiGate-7000 HA cluster with uninterrupable-upgrade disabled interrupts traffic because the firmware running on the FIMs and FPMs upgrades in one step. These firmware upgrades should be done during a quiet time because traffic will be interrupted during the upgrade process.

A firmware upgrade takes a few minutes, depending on the number of FIMs and FPMs in your FortiGate-7000 system. Some firmware upgrades may take longer depending on factors such as the size of the configuration and whether an upgrade of the DP2 processor is included.

Before beginning a firmware upgrade, Fortinet recommends that you perform the following tasks:

  • Review the latest release notes for the firmware version that you are upgrading to.
  • Verify the recommended upgrade path as documented in the release notes.
  • Back up your FortiGate-7000 configuration.
Note

Fortinet recommends that you review the services provided by your FortiGate-7000 before a firmware upgrade and then again after the upgrade to make sure the services continues to operate normally. For example, you might want to verify that you can successfully access an important server used by your organization before the upgrade and make sure that you can still reach the server after the upgrade, and performance is comparable. You can also take a snapshot of key performance indicators (for example, number of sessions, CPU usage, and memory usage) before the upgrade and verify that you see comparable performance after the upgrade.