FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
samandeep
Staff
Staff
Article Id 306899
Description

This article describes that Auto-firmware-update is enabled by default when upgrading FortiOS from v7.0.x to v7.2.6 and how to disable it.

This issue is resolved on v7.2.8.

Scope FortiGate v7.2.5, v7.2.6.
Solution

In some models, when units are upgraded from the v7.0.x series to v7.2.5 or v7.2.6, this auto-firmware feature just gets enabled.

However, when deploying fresh v7.2.6 on FortiGates, the auto-firmware feature will be disabled by default.

 

If upgrading from v7.0.x series to v7.2.8 or later via v7.2.5/7.2.6 based on the FortiOS upgrade path, based on the requirement, it is possible to disable this feature.

 

To check whether this feature is enabled or not, check the below command:

 

diagnose test application forticldd 13

 

If enabled, the CLI response would be:

 

Automatic image upgrade: enabled

 

To preview the setting in the CLI run:

 

config sys fortiguard
sh full | grep auto

  

The output should show in the CLI as follows:

 

FortiGate # config sys fortiguard

FortiGate(fortiguard) # sh full | grep auto
    set auto-join-forticloud enable
    set auto-firmware-upgrade enabled   <-----
    set gui-prompt-auto-upgrade disable
    set interface-select-method auto

 

To edit the auto-upgrade-firmware setting, it is possible to disable the feature and view the change from the CLI with the following:

 

config sys fortiguard
    set auto-firmware-upgrade disable
end

config sys fortiguard
sh full | grep auto


The output should show in the CLI as follows: 

 

FortiGate # config sys fortiguard

FortiGate(fortiguard) # sh full | grep auto
set auto-join-forticloud enable
set auto-firmware-upgrade disable   <-----
set gui-prompt-auto-upgrade disable
set interface-select-method auto

  

Related document:

Enabling automatic firmware updates | FortiGate / FortiOS 7.2.1 | Fortinet Document Library