| Description |
This article describes how to configure automatic patch upgrades: The upgrade will only be performed on a patch within the same major release version. |
| Scope |
FortiGate v7.2.1 and later. |
| Solution |
Configurations in the GUI: Go System -> Firmware & Registration -> Automatic patch upgrades enabled/disabled:
When automatic patch upgrade is enabled, the patch-level upgrade will be scheduled after 'Delay by a number of days' during the specified time.
The patch-level upgrade can also be scheduled by specifying the days of the week during the specified time.
After the patch release is successfully installed, the automation stitch 'Firmware upgrade notification' will be triggered to send an email notification.
Configurations in the CLI:
config system fortiguard
To review the installation window of new patch releases:
diagnose test application forticldd 13 Scheduled push image upgrade: no
The event log after configuring the automatic firmware upgrade:
date=2023-09-08 time=16:21:50 eventtime=1694204482840500060 tz="-0400" logid="0100032263" type="event" subtype="system" level="notice" vd="root" logdesc="Automatic firmware upgrade schedule changed" user="system" msg="System patch-level auto-upgrade regular check enabled."
Note: This alert is triggered every time the FortiGate is rebooted.
The event log after successfully updating firmware:
date=2023-09-08 time=16:21:50 eventtime=1694204482991730680 tz="-0400" logid="0100022094" type="event" subtype="system" level="information" vd="root" logdesc="A federated upgrade was completed by the root FortiGate" msg="Federated upgrade complete" version="7.4.1"
The event log firmware upgrade notification is triggered:
date=2023-09-08 time=16:21:51 eventtime=1694204510384715240 tz="-0400" logid="0100046600" type="event" subtype="system" level="notice" vd="root" logdesc="Automation stitch triggered" stitch="Firmware upgrade notification" trigger="Auto Firmware upgrade" stitchaction="Email Notification" from="log" msg="stitch:Firmware upgrade notification is triggered."
From 7.2.6 & 7.4.0 to 7.4.4 versions the 'auto-firmware-upgrade' CLI setting will be enabled by default in most of the 1 rack unit platforms.
FortiGates which FortiManager manages or acts as Fabric root or Fabric leaf members will not be affected by this change.
The complete list of the platforms which will be affected by this change will be:
FGT-40F.
From the 7.4.5 version, the 'auto-firmware-upgrade' CLI setting will be enabled for all models including FortiGate VMs.
Related article: Technical Tip: Understanding Automatic Patch Upgrade: FortiGate Cloud Premium vs Local Setting |
