Support checking for firmware updates daily when auto firmware upgrade is enabled
|
This information is also available in the FortiOS 7.4 Administration Guide: |
When automatic firmware update is enabled, the FortiGate will check for firmware upgrades daily between a configured time interval. When a new patch release is available, a firmware upgrade will be scheduled. By actively searching for patch updates and performing patch upgrades, the system quality is improved as new security fixes are implemented and released.
You can define the installation delay using the auto-firmware-upgrade-delay command. This allows you to set the number of days before installing an automatic patch-level firmware upgrade from FortiGuard. The default delay is three days.
config system fortiguard
set auto-firmware-upgrade {enable | disable}
set auto-firmware-upgrade-day {sunday monday tuesday wednesday thursday friday saturday}
set auto-firmware-upgrade-delay <integer>
set auto-firmware-upgrade-start-hour <integer>
set auto-firmware-upgrade-end-hour <integer>
end
|
|
The |
After the patch release is successfully installed, an email is sent to the FortiCloud account that the FortiGate is registered to.
|
|
This feature is related to the previous Enable automatic firmware updates feature from the FortiOS 7.2.0 New Features Guide. However, this feature supersedes the previous feature where applicable. For example, the original feature does not actively search for a firmware upgrade daily. It searches for the latest patch and builds an upgrade path to that patch if there has been one or more patches since the last firmware upgrade. In contrast, this new feature enhancement will check for firmware updates daily so that the firmware is never more than one patch behind. |
Example
The following example demonstrates setting automatic firmware upgrades after a delay of three days.
|
|
To demonstrate the functionality of this feature, this example uses FortiGates that are running and upgrading to fictitious build numbers. |
To configure automatic firmware upgrades:
config system fortiguard
set auto-firmware-upgrade enable
set auto-firmware-upgrade-delay 3
set auto-firmware-upgrade-start-hour 2
set auto-firmware-upgrade-end-hour 4
end
The FortiGate will perform a check between the start and end hours set for the firmware upgrade to review if there is an upgrade available.
To review the available firmware upgrade check schedule:
# diagnose test application forticldd 13
Scheduled push image upgrade: no
Scheduled Config Restore: no
Scheduled Script Restore: no
Automatic image upgrade: Enabled.
Next upgrade check scheduled at (local time) Thu Mar 29 03:10:56 2023
When an available patch upgrade is detected, the automatic firmware update will be scheduled based on the set upgrade delay.
Sample event log after a new patch upgrade is detected:
date=2023-03-29 time=03:10:56 eventtime=1679336380720695924 tz="-0700"
logid="0100032263" type="event" subtype="system" level="notice" vd="vdom1"
logdesc="Automatic firmware upgrade schedule changed" user="system"
msg="System patch-level auto-upgrade new image installation scheduled
between local time Sat Apr 01 03:10:56 2023 and local time Sat Apr 01 04:00:00 2023."
To review the installation window of new patch releases:
# diagnose test application forticldd 13
Scheduled push image upgrade: no
Scheduled Config Restore: no
Scheduled Script Restore: no
Automatic image upgrade: Enabled.
Next upgrade check scheduled at (local time) Mon Mar 30 03:10:56 2023
New image 7.4.1b2305(07004000FIMG0021204001) installation is scheduled to
start at Sat Apr 01 03:10:56:21 2023
end by Sat Apr 01 04:00:00 2023
Once the firmware patch is successfully installed, an event log is created to track the change and an email is sent to the FortiCloud account under which the FortiGate is registered.
Sample event log after successfully updating firmware:
date=2023-04-01 time=03:13:04 devid="FG3H1E5819904039" devname="D" eventtime=1679590383750408029 tz="-0700" logid="0100022094" type="event" subtype="system" level="information" vd="vdom1" logdesc="A federated upgrade was completed by the root FortiGate" msg="Federated upgrade complete" version="7.4.1"