FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
sprasanta
Staff
Staff
Description
This article describes how to manually perform firmware upgrade from GUI.

Solution
FortiGate administrators whose access profiles contain system configuration read and write privileges and the FortiGate admin user can change the FortiGate firmware.
Download the most recent firmware build from the Fortinet Technical Support web site at http://support.fortinet.com/.

Before Upgrade.

Take configuration back-up:
Save the backup of the current FortiGate configuration, in case to restore it after the upgrade process.

Follow the up-gradation path:
Open the link below to find the upgradation path by selecting the Fortigate device model and 'Current FortiOS Version' and 'Upgrade to FortiOS Version'.

https://docs.fortinet.com/upgrade-tool

Read the Release note:
It is important to read the release notes which are as well available from the Fortinet Customer Service and Support site (https://support.fortinet.com/) at the same location from where the firmware image is downloaded.
Once downloaded, review the special notices, upgrade information, product integration and support, resolved issue, known issues and limitations

Download the image file/s from the support site(https://support.fortinet.com/ ) and keep it in the local admin PC to upload during the process.

To upgrade the firmware using the web-based manager.

Note.
Always upgrade the firmware from a local copy. Never perform firmware upgrade over the Internet.

1) Log into the web-based manager as the admin administrative user.
2) Go to System -> Firmware, and select the "Browse" button to locate the firmware image file.
3) Locate the file on the local computer and select the firmware image file.
4) Select 'Backup config and upgrade'  to back up the configuration and start firmware upgrade.
5) The FortiGate uploads the firmware image file, upgrades to the new firmware version, restarts, and displays the FortiGate login. This process takes a few minutes.


From GUI.

Go to System -> Firmware and select the "Browse" button to locate the firmware image file.




 

Locate the file on the local computer and select the firmware image file.
Select 'Backup config and upgrade'  to back up the configuration and start firmware

The FortiGate uploads the firmware image file, upgrades to the new firmware version, restarts, and displays the FortiGate login. This process takes a few minutes.

From CLI.

Before to begin, ensure to have a TFTP server running and accessible to the FortiGate.
Make sure the TFTP server is running.
Copy the new firmware image file to the root directory of the TFTP server.

Log into the CLI.

Make sure the FortiGate can connect to the TFTP server.

Use the following command to ping the computer running the TFTP server.
For example, if the IP address of the TFTP server is 192.168.1.168: execute ping 192.168.1.168
Enter the following command to copy the firmware image from the TFTP server to the FortiGate:
# execute restore image tftp <filename> <tftp_ipv4>
The FortiGate responds with the message:
This operation will replace the current firmware version!

Do you want to continue? (y/n)
Type 'y'. The FortiGate uploads the firmware image file, upgrades to the new firmware version, and restarts.
This process takes a few minutes.


Contributors