Upgrading hyperscale firewall features to FortiOS 6.2.7
If your FortiGate is currently running FortiOS 6.2.6 firmware and is licensed for hyperscale firewall features, you can follow a normal firmware upgrade process to upgrade to FortiOS 6.2.7.
If you are currently operating a FortiGate-4200F, 4201F, 4400F, or 4401F with an older firmware version than 6.2.6 and a hyperscale firewall license, you can upgrade in one step to FortiOS 6.2.7 because upgrading to FortiOS 6.2.7 will remove the existing hyperscale firewall configuration but the hyperscale firewall license will still be active. You can go ahead and create a new hyperscale firewall configuration for FortiOS 6.2.7.
If you are currently operating a FortiGate-4200F, 4201F, 4400F, or 4401F without a hyperscale firewall license you can use the upgrade path to upgrade to FortiOS 6.2.7. To configure hyperscale firewall features, activate your hyperscale firewall license and set up the hyperscale firewall configuration.
|
The FortiOS 6.2.7 hyperscale firewall configuration is very different from the 6.2.5 configuration. Upgrading a FortiGate-4200F, 4201F, 4400F, or 4401F from FortiOS 6.2.5 to 6.2.7 will require significant time for preparation and planning before the firmware upgrade and significant downtime after the firmware upgrade to create the new configuration. |
To upgrade an HA cluster from an older firmware version
Recommended procedure for upgrading an HA cluster from FortiOS 6.2.5 and older to FortiOS 6.2.7:
-
Disconnect the backup FortiGate from the cluster.
-
Upgrade the backup FortiGate's firmware to FortiOS 6.2.7 and set the configuration to factory defaults.
-
Create the new FortiOS 6.2.7 hyperscale firewall configuration on the backup FortiGate.
Fortinet Support can assist with setting up the new configuration.
-
When the backup FortiGate is reconfigured and the configuration tested you can swap network connections from the primary FortiGate to the backup FortiGate with minimal downtime.
-
Then you can upgrade the firmware on the primary FortiGate and reset it to factory defaults.
-
Apply the new hyperscale configuration to the primary FortiGate.
Do this before reforming the cluster, since some configurations may require restarting the FortiGate.
-
Add the primary FortiGate back to the cluster to re-form the cluster.
To upgrade a standalone FortiGate from an older firmware version
To upgrade a standalone FortiGate from FortiOS 6.2.5 and older to FortiOS 6.2.7, Fortinet recommends preparing the new configuration on a test device if possible before configuring your production FortiGate. Fortinet Support can help with planning, configuration, and conversion.