Upgrading

Installing firmware replaces your current antivirus and attack definitions, along with the definitions included with the firmware release you are installing. After you install new firmware, make sure that antivirus and attack definitions are up to date. You can also use the CLI command execute update-now to update the antivirus and attack definitions.

For more information, see the System administration handbook.

Always remember to back up your configuration before making any changes to the firmware. Be sure to read the topics Downloading and Testingbefore upgrading.

To upgrade the firmware - GUI:

1. Log into the GUI as the admin administrative user.
2. Go to System > Firmware.
3. Under Upload Firmware, select Browse and locate the firmware image file.
4. Select OK.

The FortiGate unit uploads the firmware image file, upgrades to the new firmware version, restarts, and displays the FortiGate login. This process takes a few minutes.

You can also backup and restore your configuration using Secure File Copy (SCP). See How to download/upload a FortiGate configuration file using secure file copy (SCP). You enable SCP support using the following command: config system global set admin-scp enable end For more information about this command and about SCP support, see config system global.

To upgrade the firmware - CLI:

Before you begin, ensure you have a TFTP server running and accessible to the FortiGate unit.

1. Make sure the TFTP server is running.
2. Copy the new firmware image file to the root directory of the TFTP server.
3. Log into the CLI.
4. Make sure the FortiGate unit can connect to the TFTP server. You can use the following command to ping the computer running the TFTP server. For example, if the IP address of the TFTP server is 192.168.1.168: execute ping 192.168.1.168
5. Enter the following command to copy the firmware image from the TFTP server to the FortiGate unit: execute restore image tftp <filename> <tftp_ipv4>

6. The FortiGate unit responds with the message:

   This operation will replace the current firmware version!

   Do you want to continue? (y/n)

7. Type y. The FortiGate unit uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes.
8. Reconnect to the CLI.
9. Update antivirus and attack definitions, by entering execute update-now.