Upgrading ADOM version 6.2 to 6.4

Starting in FortiManager 7.0.0, you can upgrade ADOM version 6.2 to 6.4 without first updating all devices in the ADOM from FortiOS 6.2 to 6.4.

ADOM versions 6.0, 6.2, and 7.0 do not support the feature.

When upgrading firmware for managed devices, ADOM version 6.2 can manage devices with firmware version 6.2 and 6.4. You can upgrade the ADOM version from 6.2 to 6.4 before all of the devices within the ADOM have been updated to firmware version 6.4.

The general steps for upgrading ADOM version 6.2 to 6.4 are as follows:

1. In ADOM version 6.2, update one or more of the FortiGate units to FortiOS 6.4, and then resynchronize the device.

   All of the ADOM objects, including Policy Packages, remain as 6.2 objects.

2. Upgrade the ADOM to 6.4. See Upgrading an ADOM for more information.

   All of the database objects will be converted to 6.4 format, and the GUI content for the ADOM will change to reflect 6.4 features and behavior.

After the ADOM is upgraded to version 6.4, you can install configuration changes to FortiGates running FortiOS 6.4 and to FortiGates running FortiOS 6.2. FortiManager ADOM version 6.4 supports the mix of FortiOS versions by automatically downgrading the 6.4 CLI syntax to 6.2 CLI syntax when you install configuration changes to FortiGates running FortiOS 6.2. Automatic downgrade of 6.4 CLI syntax to 6.2 CLI syntax is handled as follows:

• New 6.4 CLI syntax is discarded during downgrade to 6.2 and isn't used.
• Modified 6.4 CLI syntax is reverted to 6.2 CLI syntax and used.
• Deleted 6.4 CLI syntax is converted to 6.2 CLI syntax and uses the default values from 6.2.

Although you can install configuration changes to FortiGates running FortiOS 6.2 in ADOM version 6.4, a best practice would be to install configuration changes to FortiGates running FortiOS 6.4 in ADOM version 6.4.