HA graceful upgrade to FortiOS 6.0.9

Use the following steps to upgrade a FortiGate-6000 or 7000 HA cluster with uninterruptible-upgrade enabled from FortiOS 6.0.6 build 6392 or from FortiOS 6.0.8 build 6599 to 6.0.9 Build 6783.

To perform a graceful upgrade from FortiOS 5.6.7, 5.6.11, or 6.0.4 to FortiOS 6.0.9 Build 6783 you must use an upgrade support image. See HA graceful upgrade from FortiOS 5.6.7, 5.6.11, or 6.0.4 to FortiOS 6.0.9.

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortGate-6000 or 7000 HA cluster with only minimal traffic interruption. During the upgrade, the secondary FortiGate upgrades first. Then a failover occurs and the newly upgraded FortiGate becomes the primary FortiGate and the firmware of the new secondary FortiGate upgrades.

To perform a graceful upgrade of your FortiGate-6000 or 7000 to FortiOS 6.0.9:

1. Use the following commands to enable uninterruptible-upgrade to support HA graceful upgrade:

   config system ha

   set session-pickup enable

   set uninterruptible-upgrade enable

   end

2. Download the FortiGate-6000 or 7000 FortiOS 6.0.9 Build 6783 image file from the https://support.fortinet.com FortiOS 6.0.9 firmware image folder.

3. Perform a normal upgrade of your HA cluster.

4. Wait a few minutes, and when the upgrade is complete, verify that you have installed the correct interim firmware version. For example, for the FortiGate-6301F:

   get system status
   Version: FortiGate-6301F v6.0.9,build6783,200331 (GA)
   ...