Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

FortiGate 30E and 50E flash card space optimization

On FortiGate 30 and 50 series models, the flash and /data partition may run out of space, that can cause errors after upgrade. The following models are affected:

  • FortiGate 30E and 50E series
  • FortiWifi 30E and 50E series
  • FortiGate Rugged 30D and 35D
To resolve this issue:
  1. Install the GEOIP V2 Database on FortiGate 30 and 50 models, which uses less space on the flash card than the GEOIP v3 Database installed on other models.
  2. Provide a smaller Internet Service Database (ISDB) specifically for the FortiGate 30 and 50 models, and force these models to use this smaller ISDB.
  3. Move the IPS Database to the /data2 partition to reduce space on the /data partition.
To upgrade successfully:
Note

The output of disk spaced used in the partitions requires the use of a debug build and internal command. They are shown as reference only, based on a FortiGate 51E.

  1. Since the initial state of the /data partition on the flash card is close to 100%, manually delete the GEOIP Database to avoid upgrade failure or loss of configuration files when upgrading the firmware:

    # diagnose geoip delete-geoip-db
    This operation will delete the Geoip Database and reboot the system!
    Only super admin has the permission with the command.
    Do you want to continue? (y/n)y
    Admin:admin
    Password: ********
    File /etc/geoip_db.gz deleted successfully.
    After reboot, please update to the latest GeoDB version from FortiGuard server, with command 'execute update-geo-ip'.
    If connection to FortiGuard is not available, please upgrade the FOS firmware after reboot.
    # 
    The system is going down NOW !! 

    The FortiGate will automatically restart to free up space. Do not run execute update-geo-ip after the system reboots and before you perform the upgrade.

    Note the partition size before and after the GEOIP Database is deleted.

    Before

    97% /data

    93% /data2

    After

    82% /data

    93% /data2

  2. Upgrade the FortiGate to the new firmware. Once completed, the GEOIP V2 Database is installed. Verify the installation:

    # diagnose autoupdate versions | grep -A 2 Geography
    IP Geography DB
    ---------
    Version: 2.00114 
  3. The new firmware will force the FortiGate 30 and 50 models to use the smaller ISDB. Update the ISDB to the smaller database using FortiGuard:

    # execute update-now

    Once updated, additional space under the /data2 partition is available. Note the partition size before and after the smaller ISDB is installed.

    Before

    84% /data

    95% /data2

    After

    85% /data

    76% /data2

  4. Manually restart the FortiGate to allow the IPS Database to move to the /data2 partition.

    The space used in the /data and /data2 partitions are now reduced compared to before the upgrade.

FortiGate 30E and 50E flash card space optimization

On FortiGate 30 and 50 series models, the flash and /data partition may run out of space, that can cause errors after upgrade. The following models are affected:

  • FortiGate 30E and 50E series
  • FortiWifi 30E and 50E series
  • FortiGate Rugged 30D and 35D
To resolve this issue:
  1. Install the GEOIP V2 Database on FortiGate 30 and 50 models, which uses less space on the flash card than the GEOIP v3 Database installed on other models.
  2. Provide a smaller Internet Service Database (ISDB) specifically for the FortiGate 30 and 50 models, and force these models to use this smaller ISDB.
  3. Move the IPS Database to the /data2 partition to reduce space on the /data partition.
To upgrade successfully:
Note

The output of disk spaced used in the partitions requires the use of a debug build and internal command. They are shown as reference only, based on a FortiGate 51E.

  1. Since the initial state of the /data partition on the flash card is close to 100%, manually delete the GEOIP Database to avoid upgrade failure or loss of configuration files when upgrading the firmware:

    # diagnose geoip delete-geoip-db
    This operation will delete the Geoip Database and reboot the system!
    Only super admin has the permission with the command.
    Do you want to continue? (y/n)y
    Admin:admin
    Password: ********
    File /etc/geoip_db.gz deleted successfully.
    After reboot, please update to the latest GeoDB version from FortiGuard server, with command 'execute update-geo-ip'.
    If connection to FortiGuard is not available, please upgrade the FOS firmware after reboot.
    # 
    The system is going down NOW !! 

    The FortiGate will automatically restart to free up space. Do not run execute update-geo-ip after the system reboots and before you perform the upgrade.

    Note the partition size before and after the GEOIP Database is deleted.

    Before

    97% /data

    93% /data2

    After

    82% /data

    93% /data2

  2. Upgrade the FortiGate to the new firmware. Once completed, the GEOIP V2 Database is installed. Verify the installation:

    # diagnose autoupdate versions | grep -A 2 Geography
    IP Geography DB
    ---------
    Version: 2.00114 
  3. The new firmware will force the FortiGate 30 and 50 models to use the smaller ISDB. Update the ISDB to the smaller database using FortiGuard:

    # execute update-now

    Once updated, additional space under the /data2 partition is available. Note the partition size before and after the smaller ISDB is installed.

    Before

    84% /data

    95% /data2

    After

    85% /data

    76% /data2

  4. Manually restart the FortiGate to allow the IPS Database to move to the /data2 partition.

    The space used in the /data and /data2 partitions are now reduced compared to before the upgrade.