Upgrade

In Upgrade, you can see the current firmware version installed on the device and update to newer stable versions if they are available. The upgrade path that FortiGate Cloud displays may differ from the upgrade path that FortiGuard displays.

For an account where legacy multitenancy is enabled, you can schedule firmware upgrades via group management across subaccounts.

When a new FortiOS patch becomes available, FortiGate Cloud sends an email to notify the user that they must upgrade the firmware within seven days of the release date of the patch for FortiGates running an older patch of that FortiOS version. For a FortiGate with a paid subscription, you can postpone the upgrade for up to seven days if desired. You can postpone the upgrade multiple times. For a FortiGate without a paid subscription, if you do not upgrade it within seven days, it remains connected to FortiGate Cloud but stops uploading logs to FortiGate Cloud.

If a FortiGate without a paid subscription is not running the latest patch available of its FortiOS version when it initially connects to FortiGate Cloud, you must also upgrade it within seven days of the release date of the latest patch. If the latest patch was released more than seven days earlier, you must upgrade the FortiGate immediately. The FortiGate does not upload logs to FortiGate Cloud until it is upgraded.

Once the FortiGate is upgraded, it automatically begins uploading logs to FortiGate Cloud.

If the FortiOS version on a FortiGate reaches end of support, you must upgrade the FortiGate to the latest patch of a supported major release.

Updating to the latest patch is not required for the following devices:

• FortiGate under an account licensed for subaccount-based multitenancy
• FortiGate that is a member of one of the following:
  • High availability cluster
  • Cooperative Security Fabric
• FortiGate that is running a special build (if the build number is greater than or equal to 8000)

To upgrade remote device firmware:

1. In Assets, hover over the desired device, then click Device View.
2. Go to Management > Upgrade.
3. Verify your device's current firmware version in the upper left before continuing.
4. If you are concerned about the effects of upgrading or have not upgraded recently, use the Upgrade Path Tool to ensure you follow the recommended upgrade path.
5. Backing up your device configuration before upgrading in Management > Backup or in the device's management interface is recommended.
6. Select an available firmware version from the list, and select Upgrade. Schedule a time and date to perform the remote upgrade. Scheduling the upgrade during downtime is recommended to minimize disruption. A caution icon may also display to indicate that FortiOS does not support the upgrade path.

   

7. Wait for the upgrade to take effect.

To upgrade FortiAP, FortiSwitch, or FortiExtender firmware:

1. Go to Management > Config > FortiAP > Managed APs, > FortiSwitch > Managed FortiSwitches, or FortiExtender > FortiExtender.
2. For the desired device, click Upgrade.
3. In the Upgrade dialog, select Upload.
4. Click Choose File.
5. Browse to and upload the desired firmware file.
6. Click Upgrade. The device is upgraded to the selected firmware version.