FortiGate 30E and 50E flash card space optimization

On FortiGate 30 and 50 series models, the flash and /data partition may run out of space, that can cause errors after upgrade. The following models are affected:

• FortiGate 30E and 50E series
• FortiWifi 30E and 50E series
• FortiGate Rugged 30D and 35D

To resolve this issue:

1. Install the GEOIP V2 Database on FortiGate 30 and 50 models, which uses less space on the flash card than the GEOIP v3 Database installed on other models.
2. Provide a smaller Internet Service Database (ISDB) specifically for the FortiGate 30 and 50 models, and force these models to use this smaller ISDB.
3. Move the IPS Database to the /data2 partition to reduce space on the /data partition.

To upgrade successfully:

The output of disk spaced used in the partitions requires the use of a debug build and internal command. They are shown as reference only, based on a FortiGate 51E.

1. Since the initial state of the /data partition on the flash card is close to 100%, manually delete the GEOIP Database to avoid upgrade failure or loss of configuration files when upgrading the firmware:

   # diagnose geoip delete-geoip-db
   This operation will delete the Geoip Database and reboot the system!
   Only super admin has the permission with the command.
   Do you want to continue? (y/n)y
   Admin:admin
   Password: ********
   File /etc/geoip_db.gz deleted successfully.
   After reboot, please update to the latest GeoDB version from FortiGuard server, with command 'execute update-geo-ip'.
   If connection to FortiGuard is not available, please upgrade the FOS firmware after reboot.
   # 
   The system is going down NOW !! 

   The FortiGate will automatically restart to free up space. Do not run execute update-geo-ip after the system reboots and before you perform the upgrade.

   Note the partition size before and after the GEOIP Database is deleted.

   Before	97% /data 93% /data2
   After	82% /data 93% /data2

2. Upgrade the FortiGate to the new firmware. Once completed, the GEOIP V2 Database is installed. Verify the installation:

   # diagnose autoupdate versions | grep -A 2 Geography
   IP Geography DB
   ---------
   Version: 2.00114 

3. The new firmware will force the FortiGate 30 and 50 models to use the smaller ISDB. Update the ISDB to the smaller database using FortiGuard:

   # execute update-now

   Once updated, additional space under the /data2 partition is available. Note the partition size before and after the smaller ISDB is installed.

   Before	84% /data 95% /data2
   After	85% /data 76% /data2

4. Manually restart the FortiGate to allow the IPS Database to move to the /data2 partition.

   The space used in the /data and /data2 partitions are now reduced compared to before the upgrade.