FortiGate FW upgrade limitations

Hello Alex, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Regards,

hi,

you can find the upgrade path here, https://docs.fortinet.com/upgrade-tool/fortigate?model=FGT90G&from=7.4.7&to=7.4.12 

Thanks a lot Paul :) Hope it will help!

Hi to all,

Thank you for the upgrade-path information. I have already verified the supported upgrade path from FortiOS 7.4.7 to 7.4.12

However, the upgrade path is not the issue I am facing

The problem is that my FortiGate-90G (S/N: FGT90GTK23013290) has an expired FMWR contract, and therefore:

1. The FortiGate cannot download the firmware through FortiGuard because of the invalid license status
2. The FortiCare/FortiCloud portal does not allow me to download firmware manually because the device is no longer covered by a support contract

Fortinet's own documentation for FortiOS 7.4.8/7.4.12 specifically describes this situation. It states that for FortiGates with invalid support contracts, a required firmware upgrade may fail when the firmware download is blocked by FDS, and that in such cases the firmware image can be obtained and installed manually

This is exactly where I am blocked: I have no way to obtain the firmware image

I am not asking how to determine the upgrade path. I am asking Fortinet to provide a supported method to obtain the official firmware image for my FortiGate-90G so that I can perform the security update

In particular, could Fortinet please:

a) provide the official FortiOS 7.4.12 image for FGT90GTK23013290, or
b) temporarily enable firmware download entitlement for this device/account, or
c) provide another official method to perform the required security upgrade without renewing the FMWR contract?

The reason for this request is security remediation. The device is currently running FortiOS 7.4.7 and FortiCloud SSO is being blocked with Attack ID 20000021 due to the vulnerability addressed by the newer firmware

I am specifically remaining within the 7.4.x branch and am not requesting a major/minor branch upgrade

The FortiGate itself is already identifying FortiOS 7.4.12 build 2902 as the available firmware, but displays:

"Unable to upgrade/downgrade firmware through FortiGuard because of invalid license status"

I would appreciate it if someone from Fortinet could address the firmware-image availability issue, rather than the upgrade-path question

Thank you,
Alex