Firmware Profile
|
For FortiGates without a subscription, starting November 1, 2024, FortiGate Cloud will automatically apply the default latest patch profile for FortiOS 7.2 and older versions. |
|
|
Firmware profile assignment disables the local automatic firmware upgrade configuration on the FortiGate. |
In Management > Firmware Profile, you can configure firmware upgrade profiles for devices. The profiles aim to provide seamless and hassle-free access to the latest security patches, bug fixes, and performance enhancements. Its introduction bolsters the security posture of your devices, safeguarding them against emerging threats and vulnerabilities.
FortiGates with a FortiGate Cloud subscription support custom firmware profiles. FortiGates without a FortiGate Cloud subscription only support the default firmware profile.
To minimize operation disruption, you can choose a preferred upgrade time window on your desired weekdays or a maximum 14-day delay from the firmware release date.
To successfully execute the firmware patch upgrade task, valid Firmware & General Updates entitlement is required for FortiGates.
If an automatic firmware upgrade is scheduled for a device with the FortiGate Cloud Service subscription and you want to cancel it, you can cancel it from the Task Status page. See To cancel a group task:
For the default latest-patch profile, you can only edit the upgrade time window. You can customize other fields for a user-added firmware profile.
To configure automatic firmware upgrade:
- Go to Management > Firmware Profile.
- Click Add.
- In the Name field, enter the desired profile name.
- For FortiGate Model, do one of the following:
- Select All supported models.
- Select Specify, then click +. Select the desired FortiGate models.
- For Auto Upgrade Status, select Enable.
- For Firmware Version, do one of the following:
- Select Latest patch.
- Select Specify. From the dropdown list, select the desired FortiOS version.
- For Upgrade, do one of the following:
- Select Delay to schedule the upgrade to occur in a certain number of days. You can enter a value between 1 and 14 in the Delay by number of days field.
- Select Specify to select a day of the week. For Days Available for Upgrades, select the desired days for the upgrade to occur.
- For Preferred Upgrade Time, select the desired time range for the upgrade to occur. This is the local time in the FortiGate's time zone. Click OK. If a firmware profile is assigned to a device or a firmware upgrade is scheduled for a device, this information displays in Assets under the Firmware Profile and Scheduled Firmware Upgrade columns and in Group Management > Task Status in the Task Name column. FortiGate Cloud backs up the FortiOS configuration before the automatic upgrade takes place. If you manually upgrade the FortiGate before the automatic firmware upgrade takes place, FortiGate Cloud cancels the automatic firmware upgrade. If a FortiGate Cloud subscription has been added to a FortiGate that previously had a free subscription, the account admin user can cancel any scheduled automatic firmware upgrade from the Task Status page.