FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kgeorge
Staff
Staff
Article Id 247513
Description This article describes how to make use of the built-in FortiGate Management Station for Firmware Upgrade/Downgrade directly via CLI Console.
Scope FortiGate.
Solution

Execute the command:

 

execute restore image management-station ?

 

It will bring up a list similar to below:

 

07002000FIMG0013702004 v7.02 MR2-GA-F P4 b1396 (upgrade)
07002000FIMG0013702002 v7.02 MR2-GA-F P2 b1255 (downgrade)
07000000FIMG0013700009 v7.00 GA-M P9 b0444 (downgrade)
07000000FIMG0013700008 v7.00 GA-F P8 b0418 (downgrade)
07000000FIMG0013700007 v7.00 GA-F P7 b0367 (downgrade)
06004000FIMG0013704012 v6.04 MR4-GA-M P12 b2060 (downgrade)
06004000FIMG0013704011 v6.04 MR4-GA-M P11 b2030 (downgrade)
06004000FIMG0013704010 v6.04 MR4-GA-M P10 b2000 (downgrade)

 

The above is captured from the machine running on firmware v7.2.3 (v7.02 MR2-GA-F P3 b1262):

 

v7.02  -> Version 7.2.

MR2-GA-F -> F for Feature Build and M for Mature Build.

P4 -> Patch 4 (7.2.4).

b1396 -> Build number.

 

For upgrading to version 7.2.4, complete the command with its corresponding value as shown below:

 

execute restore image management-station 07002000FIMG0013702004

 

Then, it will show the output:

 

Getting image 07002000FIMG0013702004 from Management station...
#################################################################
This operation will replace the current firmware version!
Do you want to continue? (y/n)

 

Continue with prompts to complete the Upgrade or Downgrade process accordingly.

 

Important Notes:

 

  • Do not forget to take a back-up of the Configuration File before performing the Upgrade/Downgrade, as unlike the GUI, this process will not give the option to take a backup.

 

  • There should be proper connectivity to the FortiGuard Server to accomplish this process.

 

Disclaimer:

Fortinet TAC does not provide standby support for firmware upgrades/downgrades. Call the Fortinet Support Hotline only when an issue is encountered during the upgrade/downgrade process. Furthermore, if an issue occurs as a result of a downgrade, be prepared to perform a TFTP format and reinstall operation to restore service: Technical Tip: Formatting and loading FortiGate firmware image using TFTP.