On FortiGate 30 and 50 series models, the flash and /data partition may run out of space, that can cause errors after upgrade. The following models are affected:
- FortiGate 30E and 50E series
- FortiWifi 30E and 50E series
- FortiGate Rugged 30D and 35D
- Install the GEOIP V2 Database on FortiGate 30 and 50 models, which uses less space on the flash card than the GEOIP v3 Database installed on other models.
- Provide a smaller Internet Service Database (ISDB) specifically for the FortiGate 30 and 50 models, and force these models to use this smaller ISDB.
- Move the IPS Database to the /data2 partition to reduce space on the /data partition.
The output of disk spaced used in the partitions requires the use of a debug build and internal command. They are shown as reference only, based on a FortiGate 51E.
Since the initial state of the /data partition on the flash card is close to 100%, manually delete the GEOIP Database to avoid upgrade failure or loss of configuration files when upgrading the firmware:
# diagnose geoip delete-geoip-db This operation will delete the Geoip Database and reboot the system! Only super admin has the permission with the command. Do you want to continue? (y/n)y Admin:admin Password: ******** File /etc/geoip_db.gz deleted successfully. After reboot, please update to the latest GeoDB version from FortiGuard server, with command 'execute update-geo-ip'. If connection to FortiGuard is not available, please upgrade the FOS firmware after reboot. # The system is going down NOW !!
The FortiGate will automatically restart to free up space. Do not run
execute update-geo-ipafter the system reboots and before you perform the upgrade.
Note the partition size before and after the GEOIP Database is deleted.
Upgrade the FortiGate to the new firmware. Once completed, the GEOIP V2 Database is installed. Verify the installation:
# diagnose autoupdate versions | grep -A 2 Geography IP Geography DB --------- Version: 2.00114
The new firmware will force the FortiGate 30 and 50 models to use the smaller ISDB. Update the ISDB to the smaller database using FortiGuard:
# execute update-now
Once updated, additional space under the /data2 partition is available. Note the partition size before and after the smaller ISDB is installed.
Manually restart the FortiGate to allow the IPS Database to move to the /data2 partition.
The space used in the /data and /data2 partitions are now reduced compared to before the upgrade.