Fortinet black logo

Upgrade information

Copy Link
Copy Doc ID 2d41ab62-4d5b-11ec-bdf2-fa163e15d75b:466825
Download PDF

Upgrade information

Refer to the Upgrade Path Tool (https://docs.fortinet.com/upgrade-tool) in the Fortinet documentation library to find supported upgrade paths for all FortiGate models and firmware versions.

A similar upgrade path tool is also available from Fortinet Support: https://support.fortinet.com.

See also, Upgrade information in the FortiOS 6.4.8 release notes.

In some cases, these upgrade path tools may recommend slightly different upgrade paths. If that occurs, the paths provided by both tools are supported and you can use either one.

If your FortiGate is currently running FortiOS 6.2.6, 6.2.7, 6.2.9, or 6.4.6 firmware and is licensed for hyperscale firewall features, you can follow a normal firmware upgrade process to upgrade to FortiOS 6.4.8.

If you are currently operating a FortiGate-4200F, 4201F, 4400F, or 4401F without a hyperscale firewall license, you can use the upgrade path to upgrade to FortiOS 6.4.8. Once you have upgraded to 6.4.8 you can activate your hyperscale firewall license and set up your hyperscale firewall configuration.

Note

After the firmware upgrade is complete, you should check the NP queue priority configuration. In some cases the NP queue priority configuration may be incorrect after a firmware upgrade. For more information, see Check the NP queue priority configuration after a firmware upgrade.

Note

After the firmware upgrade is complete, you should also check the following configuration.

config system npu

config dsw-queue-dts-profile

edit <name>

set iport <option>

set oport <option>

end

When this command was first added with FortiOS 6.4.6, the iport and oport options were all uppercase. However, for 6.4.8 they were converted to lower case. This change was missed in the upgrade code, so your configuration of this command may be lost after upgrading to 6.4.8.

Upgrade information

Refer to the Upgrade Path Tool (https://docs.fortinet.com/upgrade-tool) in the Fortinet documentation library to find supported upgrade paths for all FortiGate models and firmware versions.

A similar upgrade path tool is also available from Fortinet Support: https://support.fortinet.com.

See also, Upgrade information in the FortiOS 6.4.8 release notes.

In some cases, these upgrade path tools may recommend slightly different upgrade paths. If that occurs, the paths provided by both tools are supported and you can use either one.

If your FortiGate is currently running FortiOS 6.2.6, 6.2.7, 6.2.9, or 6.4.6 firmware and is licensed for hyperscale firewall features, you can follow a normal firmware upgrade process to upgrade to FortiOS 6.4.8.

If you are currently operating a FortiGate-4200F, 4201F, 4400F, or 4401F without a hyperscale firewall license, you can use the upgrade path to upgrade to FortiOS 6.4.8. Once you have upgraded to 6.4.8 you can activate your hyperscale firewall license and set up your hyperscale firewall configuration.

Note

After the firmware upgrade is complete, you should check the NP queue priority configuration. In some cases the NP queue priority configuration may be incorrect after a firmware upgrade. For more information, see Check the NP queue priority configuration after a firmware upgrade.

Note

After the firmware upgrade is complete, you should also check the following configuration.

config system npu

config dsw-queue-dts-profile

edit <name>

set iport <option>

set oport <option>

end

When this command was first added with FortiOS 6.4.6, the iport and oport options were all uppercase. However, for 6.4.8 they were converted to lower case. This change was missed in the upgrade code, so your configuration of this command may be lost after upgrading to 6.4.8.