After a FortiGate-7000 firmware upgrade, you should verify that all of the FIMs and FPMs have been successfully upgraded to the new firmware version.
After the firmware upgrade appears to be complete:
Log into the primary FIM and verify that it is running the expected firmware version.
You can verify the firmware version running on the primary FIM from the System Information dashboard widget or by using the
get system statuscommand.
Confirm that the FortiGate-7000 is synchronized.
Go to Monitor > Configuration Sync Monitor to verify the configuration status of the FIMs and FPMs. You can also use the
diagnose sys confsync status | grep in_sycommand to see if the FIMs and FPMs are all synchronized. In the command output,
in_sync=1means the FIM or FPM is synchronized.
In_sync=0means the FIM or FPM is not synchronized, which could indicated the FIM or FPM is running a different firmware build than the primary FIM.
Optionally, you can also log into the other FIM and FPMs, and in the same way confirm that they are also running the expected firmware version and are synchronized.