Description
This article provides generic recommendations on how to perform firmware updates of Fortinet products, explains the order in which to upgrade different devices, and provides a guide to determine the correct upgrade path.
After a product update, it is often necessary to upgrade other related devices to maintain compatibility.
Scope
FortiGate.
Solution
If multiple different Fortinet devices are being used then they should always be updated in the order:
FortiAnalyzer -> FortiManager -> FortiGate devices -> Managed FortiExtender devices -> Managed FortiSwitch devices -> Managed FortiAP devices -> FortiClient EMS -> FortiClient -> FortiSandbox -> FortiMail -> FortiWeb -> FortiNAC -> FortiVoice -> FortiDeceptor -> FortiAI -> FortiTester -> FortiMonitor -> FortiPolicy.
As a rule of thumb, the FortiManager and the FortiAnalyzer must be at the same or higher version as the most updated managed device otherwise some functionality may not work correctly.
When upgrading the Security Fabric, devices that manage other devices should be upgraded first.
Note: When using FortiClient with FortiAnalyzer, it is necessary to upgrade both to their latest versions. The versions of the two products should match. For example, if using FortiAnalyzer v7.2.0, use FortiClient v7.2.0.
To view supported upgrade path information:
- Go to https://support.fortinet.com.
- From the Download menu, select Firmware Images.
- Check that the Selected Product is FortiGate.
- Select the Upgrade Path tab and select the following:
Current Product.
Current FortiOS Version.
Upgrade To FortiOS Version.
- Select Go.
When upgrading from a very old build no direct upgrade path may be available. In this case, the upgrade will have to be performed using a few intermediate steps to retain the configuration.
Ensure that a backup is taken of the configuration file before each upgrade step. In the event of a problem during the upgrade, this will allow a rollback with the installation of the latest stable build and restoration of the configuration from the backup.
When upgrading FortiAnalyzer consider also a backup of logs before the upgrade in addition to a backup of the configuration file. The CLI guide in the FortiAnalyzer section of the Fortinet Technical Documentation website provides additional details regarding the backup of logs.
