HA graceful upgrade to FortiOS 7.0.10

Use the following steps to upgrade a FortiGate-6000 or 7000 HA cluster with uninterruptible-upgrade enabled from FortiOS 6.4.10 build 1875 or FortiOS 7.0.5 build 0057 to FortiOS 7.0.10 Build 0117.

Enabling uninterruptible-upgrade allows you to upgrade the firmware of an operating FortiGate-6000 or 7000 HA configuration with only minimal traffic interruption. During the upgrade, the secondary FortiGate upgrades first. Then a failover occurs and the newly upgraded FortiGate becomes the primary FortiGate and the firmware of the new secondary FortiGate upgrades.

Upgrading to FortiOS 7.0.10 Build 0117 may include updating the FortiGate-6000 or 7000E DP processor firmware. The DP processor firmware upgrade occurs during the normal firmware upgrade process and no extra steps are required. It just may take longer to run the upgrade than normal. Upgrading to FortiOS 7.0.10 Build 0117 will not update the FortiGate-7000F NP7 processor firmware.

To perform a graceful upgrade of your FortiGate-6000 or 7000 from FortiOS 6.4.10 or 7.0.5 to FortiOS 7.0.10:

1. Use the following command to enable uninterruptible-upgrade to support HA graceful upgrade:

   config system ha

   set uninterruptible-upgrade enable

   end

2. Download FortiOS 7.0.10 firmware for FortiGate-6000 or 7000 from the https://support.fortinet.com FortiGate-6K7K 7.0.10 firmware image folder.

3. Perform a normal upgrade of your HA cluster using the downloaded firmware image file.

4. Verify that you have installed the correct firmware version. For example, for a FortiGate-6301F:

   get system status
   Version: FortiGate-6301F v7.0.10,build0117,230224 (GA.M)
   ...