Enable Automatic Firmware With FortiManager

Question

We have about 60 FortiGates connected to a FortiManager. The FortiManager is only used for config backups. I want to setup firmware updates to install automatically once they are released.

If we did not have a FortiManager I could simply enable automatic firmware updates. Because it is connected to a FortiManager those are disabled. I reached out to FortiNet Support and worked with a tech and we found no way to enable them from the FortiGate side. Blocking FortiManager does not allow for the local setting to be enabled.

In the FortiManager I am not seeing a way to setup automatic firmware updates, or enable the automatic firmware updates to be enabled on the FortiGate.

I see I can schedule FortiGates to update to 7.4.11 on Sunday of this week, but it looks like I have to manually adjust that every time a new firmware comes out. We don't want all the FortiGates to update on the same day, so we will have several of these to spread out the updates and I really don't want to have to keep adjusting them manually. Am I missing something? It seems like adding the FortiManager has made keeping all the FortiGates up to date harder. Thanks!

farhanahmed · Answer

Hi,

From FMG cannot do automatic update when new firmware is available.

Its not always a good idea to automatically update the FGTs to the next available version (personal opinion).

I would always check the release notes and see if there are any known issues that could impact current working Fabric/setup. If its absolutely necessary to update the FGTs (e.g. due to vulnerability) then use 'Firmware Templates' and schedule the upgrade from FMG.

Sign up

Login with SSO

Login to the community

Login with SSO