Replace an old FortiGate with a new one

You can replace your FortiGate devices. The most important thing to remember is to back up the FortiGate configuration and restore it to the new FortiGate. For backup issue, visit Administration Guide | FortiGate / FortiOS 7.2.2 | Fortinet Documentation Library.

From the FortiToken Cloud, do the following:

1. Select Auth Clients -> FortiProducts.

2. Find the old FGT by searching the serial number in search bar.

3. Select the device from the Auth Client list, and click Delete.

After removed the old FortiGate, the new FortiGate can be registered to your FC account by entering the registration code from device, or the license number if it is a VM. After the device is registered under the FC account, you can enable FortiToken Cloud on the FortiGate. This is important because you are going to restore the users who are using FortiToken Cloud as the MFA method in the next step.

Now, it’s time to restore the configuration from the old FortiGate. After the basic configuration is restored, end-users will also be restored. (Note: If the users exist in the VDOM, you need to back up/restore the VDOMs configuration.)

Finally, the users and auth clients will be updated if “Auto-create Auth Client” is enabled in FortiToken Cloud Global setting page, otherwise, you need to run the command, “exec fortitioken-cloud update”, to manually update the VDOMs information from FortiGate to FortiToken Cloud and update the user's information.

After you finish all these steps, the new FortiGate should be set up and ready to use.