Fortinet black logo

Administration Guide

Upgrading individual device firmware

To upgrade individual device firmware in the GUI:
  1. Log into the FortiGate GUI as the admin administrative user.
  2. Go to System > Fabric Management.
  3. Select the FortiGate, and click Upgrade. The FortiGate Upgrade pane opens.
  4. Click the following tabs to view the available firmware:

    Latest

    Displays the latest, available firmware from FortiGuard.

    All Upgrades

    Displays all available firmware from FortiGuard.

    File Upload

    Click the File Upload tab to upload a firmware file that you previously downloaded from the Fortinet Customer Service & Support website.

  5. See Downloading a firmware image.
  6. Select a firmware version and click Confirm and Backup Config.

    If you are upgrading from a mature to a feature firmware version, the Confirm pane opens with a warning message.

  7. Review the warning, and click Confirm to continue. A warning message is displayed.
  8. Click Continue to initiate the upgrade.

    The FortiGate unit backs up the current configuration to the management computer, uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes.

To upgrade individual device firmware in the CLI:
  1. Make sure that the TFTP server is running.
  2. Copy the new firmware image file to the root directory of the TFTP server.
  3. Log in to the CLI.
  4. Ping the TFTP server to ensure that the FortiGate can connect to it:

    execute ping <tftp_ipv4>

  5. Enter the following command to copy the firmware image from the TFTP server to the FortiGate unit:

    execute restore image tftp <filename> <tftp_ipv4>

    The FortiGate unit responds with the message:

    This operation will replace the current firmware version!

    Do you want to continue? (y/n)

  6. Type y. The FortiGate unit uploads the firmware image file, verifies the signature of the firmware image, and determines the firmware maturity level.

    When you are upgrading to a feature firmware image, you are asked to confirm whether to continue with the upgrade.

    When you proceed with the upgrade, the upgrade image is installed and FortiGate restarts. This process takes a few minutes.

    Please wait... Connect to tftp server 172.16.200.55 ... ############################################################################## Get image from tftp server OK. Verifying the signature of the firmware image. Warning: Upgrading to an image with Feature maturity notation. Image file uploaded is marked as a Feature image, are you sure you want to upgrade? Do you want to continue? (y/n)y Please confirm again. Are you sure you want to upgrade using uploaded file? Do you want to continue? (y/n)y Checking new firmware integrity ... pass Please wait for system to restart. Firmware upgrade in progress ... Done. The system is going down NOW !!

  7. Reconnect to the CLI.
  8. Update the antivirus and attack definitions:

    execute update-now

To upgrade individual device firmware in the GUI:
  1. Log into the FortiGate GUI as the admin administrative user.
  2. Go to System > Fabric Management.
  3. Select the FortiGate, and click Upgrade. The FortiGate Upgrade pane opens.
  4. Click the following tabs to view the available firmware:

    Latest

    Displays the latest, available firmware from FortiGuard.

    All Upgrades

    Displays all available firmware from FortiGuard.

    File Upload

    Click the File Upload tab to upload a firmware file that you previously downloaded from the Fortinet Customer Service & Support website.

  5. See Downloading a firmware image.
  6. Select a firmware version and click Confirm and Backup Config.

    If you are upgrading from a mature to a feature firmware version, the Confirm pane opens with a warning message.

  7. Review the warning, and click Confirm to continue. A warning message is displayed.
  8. Click Continue to initiate the upgrade.

    The FortiGate unit backs up the current configuration to the management computer, uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes.

To upgrade individual device firmware in the CLI:
  1. Make sure that the TFTP server is running.
  2. Copy the new firmware image file to the root directory of the TFTP server.
  3. Log in to the CLI.
  4. Ping the TFTP server to ensure that the FortiGate can connect to it:

    execute ping <tftp_ipv4>

  5. Enter the following command to copy the firmware image from the TFTP server to the FortiGate unit:

    execute restore image tftp <filename> <tftp_ipv4>

    The FortiGate unit responds with the message:

    This operation will replace the current firmware version!

    Do you want to continue? (y/n)

  6. Type y. The FortiGate unit uploads the firmware image file, verifies the signature of the firmware image, and determines the firmware maturity level.

    When you are upgrading to a feature firmware image, you are asked to confirm whether to continue with the upgrade.

    When you proceed with the upgrade, the upgrade image is installed and FortiGate restarts. This process takes a few minutes.

    Please wait... Connect to tftp server 172.16.200.55 ... ############################################################################## Get image from tftp server OK. Verifying the signature of the firmware image. Warning: Upgrading to an image with Feature maturity notation. Image file uploaded is marked as a Feature image, are you sure you want to upgrade? Do you want to continue? (y/n)y Please confirm again. Are you sure you want to upgrade using uploaded file? Do you want to continue? (y/n)y Checking new firmware integrity ... pass Please wait for system to restart. Firmware upgrade in progress ... Done. The system is going down NOW !!

  7. Reconnect to the CLI.
  8. Update the antivirus and attack definitions:

    execute update-now