Troubleshooting Tip: No firmware available from FortiGuard under firmware management
Description
This article describes how to resolve a scenario where no new firmware is listed in the Firmware Management section of the GUI.
Solution
- Run the following commands to make sure that the FortiGuard Distribution Network has the images updated on FDN Servers.
diagnose fdsm image-list
diagnose fdsm fds-update
The above commands will list all the compatible firmware images & versions that are retrieved from FDN. If this is successful, there will be no issues communicating with the FortiGuard distribution list.
Note:
In case of a new device, such as the G series, and there is no available upgrade/downgrade path, the result will show an error for those commands.
Note:
The above issue (screenshot with 'Result=Error') may also be seen sometimes when the unit is having difficulty connecting to FortiGuard services.
In such cases, below logs can be seen from the output of 'diagnose debug application update -1'.
2025-10-18 02:18:19 do_update[744]-Starting now UPDATE (final try) <-----
2025-10-18 02:18:19 upd_fds_create_list[1295]-No server found for update[00000001] <-----
2025-10-18 02:18:19 __update_upd_comp_by_settings[499]-Disabling FLEN components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[503]-Disabling NIDSDB/ISDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[507]-Disabling MUDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[511]-Disabling FMWPDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[515]-Disabling APPDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[519]-Disabling IOTDB/OTDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[527]-Disabling AVEN components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[531]-Disabling AVDB/FLDB/MMDB components.
2025-10-18 02:18:19 do_update[755]-UPDATE failed <-----
- allow-remote-firmware-upgrade is enabled by default. If it was disabled previously, enable it by running the following command:
config system central-management
set allow-remote-firmware-upgrade enable
end
This will enable remotely upgrading the firmware on this FortiGate from the central management server (FortiGuard by default).
After this change, it will be possible to find the recommended firmware:
If FortiGuard Firmware is still not available, it may be because the current FortiOS version has reached End of Support (EOS). In this case, manually upgrade the FortiGate to a supported version. After that, all the images should be visible.
FGT # diagnose debug application update -1
FGT # diagnose debug console timestamp enable
FGT # diagnose debug enable
FGT # execute update-now
FGT # 2025-08-08 08:14:38 [3315] fds_handle_request: Received cmd 117 from pid-25131, len 4
2025-08-08 08:14:38 [3327] fds_handle_request: Image list was updated within 86400 secs.
2025-08-08 08:14:38 [470] fds_send_reply: Sending 6128 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 116 from pid-25133, len 0
2025-08-08 08:14:48 [470] fds_send_reply: Sending 8 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 116 from pid-25133, len 0
2025-08-08 08:14:48 [470] fds_send_reply: Sending 8 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 101 from pid-25133, len 0
2025-08-08 08:14:48 [42] fds_queue_task: req-101 is added to message-controller
2025-08-08 08:14:51 [3315] fds_handle_request: Received cmd 117 from pid-25131, len 4
2025-08-08 08:14:51 [3327] fds_handle_request: Image list was updated within 86400 secs.
2025-08-08 08:14:51 [470] fds_send_reply: Sending 6128 bytes data.
2025-08-08 08:14:51 [3315] fds_handle_request: Received cmd 119 from pid-25133, len 4
2025-08-08 08:14:51 [3343] fds_handle_request: Upgrade matrix was updated within 86400 secs.
4. If FortiGate is facing high memory issues, it may be necessary to bring down the memory first or, if possible, reboot the FortiGate.
Option 1: It is possible to manually download the firmware from the Support portal:
- Log in to the Support portal.
- Go to Download -> Firmware Images.
- Choose FortiGate -> Download and choose the file for FortiGate with the .out file format.
Option 2: In newer versions, via the CLI:
Example to update to version 7.0.17.
diagnose fdsm image-list | grep v7.0
AWSFortiGate01 # diagnose fdsm image-list | grep v7.0
07000000FIMG0014000019 v7.0 GA-M P19 b0696 (downgrade)
07000000FIMG0014000018 v7.0 GA-M P18 b0695 (downgrade)
07000000FIMG0014000017 v7.0 GA-M P17 b0682 (downgrade)
07000000FIMG0014000016 v7.0 GA-M P16 b0667 (downgrade)
07000000FIMG0014000015 v7.0 GA-M P15 b0632 (downgrade)
07000000FIMG0014000014 v7.0 GA-M P14 b0601 (downgrade)
07000000FIMG0014000013 v7.0 GA-M P13 b0566 (downgrade)
07000000FIMG0014000012 v7.0 GA-M P12 b0523 (downgrade)
07000000FIMG0014000011 v7.0 GA-M P11 b0489 (downgrade)
07000000FIMG0014000010 v7.0 GA-M P10 b0450 (downgrade)
07000000FIMG0014000009 v7.0 GA-M P9 b0444 (downgrade)
07000000FIMG0014000008 v7.0 GA-F P8 b0418 (downgrade)
07000000FIMG0014000007 v7.0 GA-F P7 b0367 (downgrade)
...
execute restore image management-station 07000000FIMG0014000017
Please wait...
Notes: Product life cycle information of all the Fortinet products can be referred to on the Product Life Cycle. Check the firmware path and compatibility depending on the hardware here: Upgrade Path Tool Table. FortiGate must be registered and have a valid support contract (Firmware & General Updates).
- Technical Tip: Product Life Cycle Information on Fortinet products
- Technical Tip: Manual firmware upgrade by referring to an upgrade path
- Troubleshooting Tip: Troubleshoot when no new firmware is available in the Firmware Management section from GUI
- Prevent FortiGates with an expired support contract from upgrading to a major or minor firmware release