Skip to main content
johnlloyd_13
johnlloyd_13
Explorer III
September 4, 2024
Solved

Downgrade Fortigate OS

  • September 4, 2024
  • 2 replies
  • 3238 views

hi,

i'll be doing an OS upgrade on a FG HA pair.

if for some reason I need to "downgrade", do I just select the OLD firmware, reboot and then restore the config referenced to the OLD firmware?

is the downgrade the same as upgrade process, i.e. i only upload the firmware in the primary/active FG, it will auto push firmware to secondary, auto reboot secondary, then auto reboot primary?

Best answer by hrahuman_FTNT

Hi,

 

If it is single upgrade then you can choose the secondary partition to restore the older upgrade image.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Selecting-an-alternate-firmware-for-the-next/ta-p/191425

If there are multiple firmware upgrades and you need to revert to the original version. By referring to the given article, you must format the flash with a TFTP server and load the initial firmware version. Then, restore the configuration file that was saved prior to the upgrade.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Formatting-and-loading-FortiGate-firmware-image/ta-p/197617?cmd=displayKC&dialogID=234546058&docType=kc&docTypeID=DT_KCARTICLE_1_1&externalId=10338&sliceId=1&stateId=1%200%20234544479%27)

 

2 replies

hrahuman_FTNT
Staff & Editor
hrahuman_FTNTAnswer
Staff & Editor
September 4, 2024

Hi,

 

If it is single upgrade then you can choose the secondary partition to restore the older upgrade image.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Selecting-an-alternate-firmware-for-the-next/ta-p/191425

If there are multiple firmware upgrades and you need to revert to the original version. By referring to the given article, you must format the flash with a TFTP server and load the initial firmware version. Then, restore the configuration file that was saved prior to the upgrade.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Formatting-and-loading-FortiGate-firmware-image/ta-p/197617?cmd=displayKC&dialogID=234546058&docType=kc&docTypeID=DT_KCARTICLE_1_1&externalId=10338&sliceId=1&stateId=1%200%20234544479%27)

 

    johnlloyd_13
    johnlloyd_13Author
    Explorer III
    September 5, 2024

    hi,

    thanks for the link!

    i have HA active-passive setup.

    can you please confirm which partition/OS do i choose if i want to "downgrade" from 7.2.5 > 7.2.4?

    in the case below, is partition 1 = primary, then partition 2 = secondary?

    do i use the command "execute set-next-reboot primary" to do a downgrade to 7.2.4?

     

    FG-PRI # config global

    FG-PRI (global) # diag sys flash list
    Partition Image TotalSize(KB) Used(KB) Use% Active
    1 FG201F-7.02-FW-build1396-230131 253871 102430 40% No <<< 7.2.4
    2 FG201F-7.02-FW-build1517-230606 253871 115176 45% Yes <<< 7.2.5
    3 ETDB-1.00000 28327040 249692 1% No
    Image build at Jun 6 2023 16:48:30 for b1517


    FG-PRI (global) # execute set-next-reboot
    primary partition
    secondary partition

     

    hrahuman_FTNT
    Staff & Editor
    hrahuman_FTNT
    Staff & Editor
    September 5, 2024

    Hi,

     

    Yes.It is Partition # 1 is primary and # 2 is secondary.

    If you select the image which is already running then the following error will be displayed.

    FG180F-3 # execute set-next-reboot primary
    Image# 1 is already the default image.

     

    -Habeeb

     

     

      Terms & ConditionsAccessibility statement