Technical Tip: How to identify and restore previous versions of firmware
Description
This article provides a method to identify and, if necessary, to restore a previous firmware image from a flash disk (downgrade to a previous version).
The relevant release notes and admin guides should be consulted before any firmware version changes to understand the implications of the change.
The relevant release notes and admin guides should be consulted before any firmware version changes to understand the implications of the change.
Scope
FortiGate.
Solution
The following example illustrates how to restore the firmware from v7.0.6 to v7.4.9.
- Determine the Image revision ID on flash using the command:
diagnose system flash list
Use the build number to determine the precise firmware version and compare it to support.fortinet.com or the upgrade tool, which allows one to confirm which build number corresponds to the firmware version.
An alternative way to confirm the firmware version would be from the backup config; the first line consists of the firmware version along with the build number such as '#config-version=FGT-7.0.15-FW-build0632-240403:opmode=0:vdom=0:'.
-
Use the following command to restore the firmware held in partition 2:
The device will reboot and load the previously selected version.
- As an alternative, the command execute set-next-reboot {primary | secondary} can be used to restore to the previous version of firmware. For further details on usage, see Technical Tip: Selecting an alternate firmware for the next reboot.
