Skip to main content
sysadm
New Member
October 9, 2016
Question

Is it posible to downgrade a fortigate 100D G3 to 4MR3 ?

  • October 9, 2016
  • 1 reply
  • 11339 views

Hi fellows:

 

I have a fortigate 100D "G2" running 4mr3 patch 15, and a new one G3 shipped with 5.2, the idea is to replace the G2 with the G3 hardware, and i am just wondering about downgrading the G3 to 4.3.15 in order to execute the upgrade steps to 5.2 with a backup of my current working configuration, i want to do this in order to minimize the downtime of the production equipment during the replace process.

 

This device is working as a packet filter and vpn for remote offices and ssl vpn for road warriors, no utm functions enabled.

 

Have some one tried this?

 

What are your thoughts about this?

 

Any recommendations?

 

Thanks in advance

Victor

    1 reply

    claumakurumure
    New Member
    October 9, 2016

    Hi there,

     

    I don't think there is need to worry much here since they are all FGT 100Ds since the firmware is the same for the same devices (note i am not sure the significant difference between G2 and G3) but the only diffrence that matters in conversion will be Fortiwifi and POE devices or different models. I would do the following

     

    1.Download firmware 4.3.15 

    2. Install 4.3.15 firmware on new FGT 100D

    3. Restore the back up on the new device and do one to one comparison if in doubt

    4. Upgrade to the desired firmware if need be following the recommended path

    5. Do a straight swop and test 

     

    note that you can also use a conversion with forticonverter from 4.3.x to 5.2.x even on different models I have done this several times and even with different vendors

     

     

    Toshi_Esumi
    SuperUser
    SuperUser
    October 10, 2016

    As far as I experienced they're minor hardware upgrades that doesn't affect to software. Like FG60D first came without a RJ45 console port, then next gen came with it (again). FG1500D G2 upgraded log hd capacity from G1.