| Description | This article describes the default behavior change for the auto-firmware-upgrade feature in FortiOS v7.4.5/v7.6.0. |
| Scope | FortiOS v7.4.5/v7.6.0 and above. |
| Solution |
The default behavior of automatic firmware upgrades has been changed with the introduction of v7.4.5 and v7.6.0. By default, all FortiOS platforms (hardware and VM) will enable the automatic firmware upgrade. Refer to the announced changes in default behavior in FortiOS 7.4.5 Release Notes under ID 1043962. Automatic firmware upgrade control.
This default behavior change does not impact FortiOS 7.2.x and below. The following screenshot demonstrates the default parameter configured in v7.2.10:
Meanwhile, the following screenshot demonstrates the default parameter configured in FortiOS 7.4.5:
As firmware upgrades would result in FortiGate reboot and possible service disruption, administrators who would like to manage the firmware upgrade manually are advised to disable the auto-firmware-upgrade.
To disable auto-firmware-upgrade, refer to Technical Tip: How to disable automatic firmware upgrades on FortiGates
Note: Starting with v7.4.8, v7.6.4, and v8.0.0, a new behavior has been introduced on unlicensed or expired-support FortiGate devices. If support is not valid, the FortiGate will automatically schedule a firmware upgrade to the latest patch in its current minor version. This is managed through the CLI under 'config system federated-upgrade', where the upgrade schedule becomes visible.
However, this scheduled upgrade cannot be cancelled, only postponed for up to seven days using the command 'execute auto-upgrade delay-installation'. There is no limit on the number of times this can be delayed. For more details, read the article: Technical Tip: Disable auto-upgrade for unlicensed FortiGates
Related documents: Enabling automatic firmware updates Technical Tip: How to disable automatic firmware upgrades on FortiGates Technical Tip: Behavior changed for auto-firmware-upgrade feature in FortiOS 7.4.5/7.6.0 |
