Fortinet white logo
Fortinet white logo

Deployment information

Deployment information

You can deploy the FortiProxy on a FortiProxy unit or VM. You can also upgrade or downgrade an existing FortiProxy deployment. Refer to Product integration and support for a list of supported FortiProxy units and VM platforms.

Downloading the firmware file

  1. Go to https://support.fortinet.com.
  2. Click Login and log in to the Fortinet Support website.
  3. From the Support > Downloads menu, select Firmware Download.
  4. In the Select Product dropdown menu, select FortiProxy.
  5. On the Download tab, navigate to the FortiProxy firmware file for your FortiProxy model or VM platform in the Image Folders/Files section. .out files are for upgrade or downgrade. .zip and .gz files are for new deployments.
  6. Click HTTPS to download the firmware that meets your needs.

Deploying a new FortiProxy appliance

Refer to the FortiProxy QuickStart Guide for detailed instructions of deploying a FortiProxy appliance. Refer to Product integration and support for a list of supported FortiProxy units.

Deploying a new FortiProxy VM

Refer to the FortiProxy Public Cloud or FortiProxy Private Cloud deployment guides for more information about how to deploy the FortiProxy VM on different public and private cloud platforms. Refer to Product integration and support for a list of supported VM platforms.

Upgrading the FortiProxy

Note

FortiProxy 7.6.1 supports upgrade from 7.4.x or 7.6.x.

If Security Fabric is enabled, all FortiProxy units must be upgraded to the same version. For example, if Security Fabric is enabled in FortiProxy 7.6.1, all FortiProxy devices in the Security Fabric must run FortiProxy 7.6.1. Otherwise, some devices may get stale or disconnected from the root, resulting in issues with fabric logging and address synchronization.

To upgrade FortiProxy units or VMs from 7.4.x to 7.6.1:
  1. Reboot the FortiProxy.

    You must reboot the FortiProxy before the upgrade process. Otherwise, the device may be damaged due to upgrade failure during critical processing.

  2. In the GUI, go to System > Fabric Management.

  3. Select the device you want to upgrade in the table and click Upgrade.

  4. Click Browse in the File Upload tab.

  5. Select the file on your PC and click Open.

  6. Click Confirm and Backup Config.

  7. Click Continue.

    The configuration file is automatically saved and the system will reboot.

  8. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.

If you are currently using FortiProxy 7.0.x or 7.2.x, Fortinet recommends that you perform the upgrade procedure for each major version in between from low to high before attempting to upgrade to 7.6.1. For example, to upgrade from 7.0.17 to 7.6.1, upgrade to 7.2.5 or later first (reboot before upgrading to 7.2.x), and then 7.4.x, and then 7.6.1.

Upgrading a FortiProxy 2.0.5 VM to 7.0.x requires a different upgrade process with additional backup and configuration as FortiProxy 2.0.6 introduced a new FortiProxy VM license file that cannot be used by earlier versions of the FortiProxy VM.

To upgrade a FortiProxy 2.0.5 VM to 7.0.x:
  1. Back up the configuration from the GUI or CLI. Make sure the VM license file is stored on the PC or FTP or TFTP server.

  2. Shut down the original VM.

  3. Deploy the new VM. Make sure that there is at least 4 GB of memory to allocate to the VM.

  4. From the VM console, configure the interface, routing, and DNS for GUI or CLI access to the new VM and its access to FortiGuard.

  5. Upload the VM license file using the GUI or CLI.

  6. Restore the configuration using the CLI or GUI.

  7. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.

Downgrading the FortiProxy

Downgrading FortiProxy 7.6.1 to previous firmware versions results in configuration loss on all models. Only the following settings are retained:

  • operation mode

  • interface IP/management IP

  • static route table

  • DNS settings

  • admin user account

  • session helpers

  • system access profiles

If Security Fabric is enabled, all FortiProxy units must be downgraded to the same version. For example, if Security Fabric is enabled in FortiProxy 7.6.1, all FortiProxy devices in the Security Fabric must run FortiProxy 7.6.1. Otherwise, some devices may get stale or disconnected from the root, resulting in issues with fabric logging and address synchronization.

You can downgrade FortiProxy units or VMs from 7.6.1 to 7.4.x by following the steps below:

  1. In the GUI, go to System > Fabric Management.

  2. Select the device you want to upgrade in the table and click Upgrade.

  3. Click Browse in the File Upload tab.

  4. Select the file on your PC and click Open.

  5. Click Confirm and Backup Config.

  6. Click Continue.

    The configuration file is automatically saved and the system will reboot.

  7. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.

To downgrade from FortiProxy 7.6.1 to 7.2.x or 7.0.x, Fortinet recommends that you perform the downgrade procedure for each major version in between from high to low before attempting to downgrade to the target version. For example, to downgrade from 7.6.1 to 7.0.17, downgrade to 7.4.x first, and then 7.2.5 or later, and then 7.0.

Downgrading a FortiProxy 7.0.x VM to 2.0.5 or earlier requires a different downgrade process with additional backup and configuration as FortiProxy 2.0.6 introduced a new FortiProxy VM license file that cannot be used by earlier versions of the FortiProxy VM.

To downgrade a FortiProxy 7.0.x VM to FortiProxy 2.0.5 or earlier:
  1. Back up the configuration from the GUI or CLI. Make sure the VM license file is stored on the PC or FTP or TFTP server.

  2. Shut down the original VM.

  3. Deploy the new VM. Make sure that there is at least 2 GB of memory to allocate to the VM.

  4. From the VM console, configure the interface, routing, and DNS for GUI or CLI access to the new VM and its access to FortiGuard.

  5. Upload the VM license file using the GUI or CLI

  6. Restore the configuration using the CLI or GUI.

  7. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.

Deployment information

Deployment information

You can deploy the FortiProxy on a FortiProxy unit or VM. You can also upgrade or downgrade an existing FortiProxy deployment. Refer to Product integration and support for a list of supported FortiProxy units and VM platforms.

Downloading the firmware file

  1. Go to https://support.fortinet.com.
  2. Click Login and log in to the Fortinet Support website.
  3. From the Support > Downloads menu, select Firmware Download.
  4. In the Select Product dropdown menu, select FortiProxy.
  5. On the Download tab, navigate to the FortiProxy firmware file for your FortiProxy model or VM platform in the Image Folders/Files section. .out files are for upgrade or downgrade. .zip and .gz files are for new deployments.
  6. Click HTTPS to download the firmware that meets your needs.

Deploying a new FortiProxy appliance

Refer to the FortiProxy QuickStart Guide for detailed instructions of deploying a FortiProxy appliance. Refer to Product integration and support for a list of supported FortiProxy units.

Deploying a new FortiProxy VM

Refer to the FortiProxy Public Cloud or FortiProxy Private Cloud deployment guides for more information about how to deploy the FortiProxy VM on different public and private cloud platforms. Refer to Product integration and support for a list of supported VM platforms.

Upgrading the FortiProxy

Note

FortiProxy 7.6.1 supports upgrade from 7.4.x or 7.6.x.

If Security Fabric is enabled, all FortiProxy units must be upgraded to the same version. For example, if Security Fabric is enabled in FortiProxy 7.6.1, all FortiProxy devices in the Security Fabric must run FortiProxy 7.6.1. Otherwise, some devices may get stale or disconnected from the root, resulting in issues with fabric logging and address synchronization.

To upgrade FortiProxy units or VMs from 7.4.x to 7.6.1:
  1. Reboot the FortiProxy.

    You must reboot the FortiProxy before the upgrade process. Otherwise, the device may be damaged due to upgrade failure during critical processing.

  2. In the GUI, go to System > Fabric Management.

  3. Select the device you want to upgrade in the table and click Upgrade.

  4. Click Browse in the File Upload tab.

  5. Select the file on your PC and click Open.

  6. Click Confirm and Backup Config.

  7. Click Continue.

    The configuration file is automatically saved and the system will reboot.

  8. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.

If you are currently using FortiProxy 7.0.x or 7.2.x, Fortinet recommends that you perform the upgrade procedure for each major version in between from low to high before attempting to upgrade to 7.6.1. For example, to upgrade from 7.0.17 to 7.6.1, upgrade to 7.2.5 or later first (reboot before upgrading to 7.2.x), and then 7.4.x, and then 7.6.1.

Upgrading a FortiProxy 2.0.5 VM to 7.0.x requires a different upgrade process with additional backup and configuration as FortiProxy 2.0.6 introduced a new FortiProxy VM license file that cannot be used by earlier versions of the FortiProxy VM.

To upgrade a FortiProxy 2.0.5 VM to 7.0.x:
  1. Back up the configuration from the GUI or CLI. Make sure the VM license file is stored on the PC or FTP or TFTP server.

  2. Shut down the original VM.

  3. Deploy the new VM. Make sure that there is at least 4 GB of memory to allocate to the VM.

  4. From the VM console, configure the interface, routing, and DNS for GUI or CLI access to the new VM and its access to FortiGuard.

  5. Upload the VM license file using the GUI or CLI.

  6. Restore the configuration using the CLI or GUI.

  7. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.

Downgrading the FortiProxy

Downgrading FortiProxy 7.6.1 to previous firmware versions results in configuration loss on all models. Only the following settings are retained:

  • operation mode

  • interface IP/management IP

  • static route table

  • DNS settings

  • admin user account

  • session helpers

  • system access profiles

If Security Fabric is enabled, all FortiProxy units must be downgraded to the same version. For example, if Security Fabric is enabled in FortiProxy 7.6.1, all FortiProxy devices in the Security Fabric must run FortiProxy 7.6.1. Otherwise, some devices may get stale or disconnected from the root, resulting in issues with fabric logging and address synchronization.

You can downgrade FortiProxy units or VMs from 7.6.1 to 7.4.x by following the steps below:

  1. In the GUI, go to System > Fabric Management.

  2. Select the device you want to upgrade in the table and click Upgrade.

  3. Click Browse in the File Upload tab.

  4. Select the file on your PC and click Open.

  5. Click Confirm and Backup Config.

  6. Click Continue.

    The configuration file is automatically saved and the system will reboot.

  7. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.

To downgrade from FortiProxy 7.6.1 to 7.2.x or 7.0.x, Fortinet recommends that you perform the downgrade procedure for each major version in between from high to low before attempting to downgrade to the target version. For example, to downgrade from 7.6.1 to 7.0.17, downgrade to 7.4.x first, and then 7.2.5 or later, and then 7.0.

Downgrading a FortiProxy 7.0.x VM to 2.0.5 or earlier requires a different downgrade process with additional backup and configuration as FortiProxy 2.0.6 introduced a new FortiProxy VM license file that cannot be used by earlier versions of the FortiProxy VM.

To downgrade a FortiProxy 7.0.x VM to FortiProxy 2.0.5 or earlier:
  1. Back up the configuration from the GUI or CLI. Make sure the VM license file is stored on the PC or FTP or TFTP server.

  2. Shut down the original VM.

  3. Deploy the new VM. Make sure that there is at least 2 GB of memory to allocate to the VM.

  4. From the VM console, configure the interface, routing, and DNS for GUI or CLI access to the new VM and its access to FortiGuard.

  5. Upload the VM license file using the GUI or CLI

  6. Restore the configuration using the CLI or GUI.

  7. Click Reset All Dashboards in the GUI to avoid any issues with FortiView.