Reverting
The following procedure reverts the FortiGate unit to its factory default configuration and deletes any configuration settings. If you are reverting to a previous FortiOS version, you might not be able to restore the previous configuration from the backup configuration file.
|
Always remember to back up your configuration before making any changes to the firmware. |
To revert to a previous firmware version - GUI:
- Log into the GUI as the admin user.
- Go to System > Firmware
- Under Upload Firmware, select Browse and locate the firmware image file.
- Select OK.
The FortiGate unit uploads the firmware image file, reverts to the old firmware version, resets the configuration, restarts, and displays the FortiGate login. This process takes a few minutes.
To revert to a previous firmware version - CLI:
Before beginning this procedure, it is recommended that you:
- Backup the FortiGate unit system configuration using the command
execute backup config
. - Backup the IPS custom signatures using the command
execute
.
backup ipsuserdefsig - Backup web content and email filtering lists.
To use the following procedure, you must have a TFTP server the FortiGate unit can connect to.
- Make sure the TFTP server is running.
- Copy the firmware image file to the root directory of the TFTP server.
- Log into the FortiGate CLI.
- Make sure the FortiGate unit can connect to the TFTP server by using the
execute ping
command. - Enter the following command to copy the firmware image from the TFTP server to the FortiGate unit:
execute restore image tftp <name_str> <tftp_ipv4>
-
The FortiGate unit responds with this message:
This operation will replace the current firmware version!
Do you want to continue? (y/n)
-
Type
y
. The FortiGate unit uploads the firmware image file. After the file uploads, a message similar to the following appears:Get image from tftp server OK.
Check image OK.
This operation will downgrade the current firmware version!
Do you want to continue? (y/n)
- Type
y
. The FortiGate unit reverts to the old firmware version, resets the configuration to factory defaults, and restarts. This process takes a few minutes. - Reconnect to the CLI.
- To restore your previous configuration, if needed, use the command:
execute restore config <name_str> <tftp_ipv4>
- Update antivirus and attack definitions using the command:
execute update-now