Firmware

Fortinet periodically updates the FortiGate firmware to include new features and resolve important issues. After you have registered your FortiGate unit, firmware updates can be downloaded from the Fortinet Customer Service & Support website.

Always back up the current configuration before installing new firmware. See Configuration backups.

Before you install any new firmware, follow the below steps:

1. Understand the maturity level of the current and target firmware releases to help you determine whether to upgrade. See Firmware maturity levels.
2. Review the Release Notes for a new firmware release.
3. Review the Supported Upgrade Paths.
4. Download a copy of the currently installed firmware, in case you need to revert to it. See Downloading a firmware image and Downgrading to a previous firmware version for details.
5. Have a plan in place in case there is a critical failure, such as the FortiGate not coming back online after the update.

   This could include having console access to the device (Connecting to the CLI), ensuring that you TFTP server is working (Installing firmware from system reboot), and preparing a USB drive (Restoring from a USB drive).

6. Back up the current configuration, including local certificates. See Configuration backups for details.
7. Test the new firmware until you are satisfied that it applies to your configuration. See Testing a firmware version and Controlled upgrade for details.

Installing new firmware without reviewing release notes or testing the firmware may result in changes to settings and unexpected issues.

Only FortiGate admin users and administrators whose access profiles contain system read and write privileges can change the FortiGate firmware.