FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Patterson
Staff
Staff
Article Id 277836

Description

 

This article describes how to restore the firmware via URL/HTTP.

 

Scope

 

FortiGate v7.0 and above.

 

Solution


Pre-requisite:

An HTTP server is needed to host the FortiGate firmware when restoring using a URL. 

There are many different HTTP servers to choose from. This article will detail using 'apache2' on Windows.

Windows:
The 'apache2' Windows binary can be obtained here.

Download and extract the .zip file to the C:/ drive. Navigate to C:/Apache24/bin.

Type 'cmd' in the top bar (this will open a CMD window in the current folder).

 

cmd.PNG

 

In the new CMD window, start the HTTP server by typing in 'httpd.exe'. Accept any prompts that come up. 

 

httpd.PNG

 

Place the firmware file into the C:/Apache24/htdocs folder.

 

htdocs.PNG

It should now be possible to restore the firmware by using this command:

 

Server # exe restore image url http://10.55.13.244/firmware.out
This operation will replace the current firmware version!
Do you want to continue? (y/n)y

 

Please wait...

 

Connect to http(s) server ...
####################################################################################################
Get image from http server OK.
Verifying the signature of the firmware image.
Warning: Upgrading to an image with Feature maturity notation.
Image file uploaded is marked as a Feature image, are you sure you want to upgrade?
Do you want to continue? (y/n)

 


Server # exe restore image url http://10.55.13.244/firmware.out
This operation will replace the current firmware version!
Do you want to continue? (y/n)y

 

Please wait...

 

Connect to http(s) server ...
####################################################################################################
Get image from http server OK.
Verifying the signature of the firmware image.
Warning: Upgrading to an image with Feature maturity notation.
Image file uploaded is marked as a Feature image, are you sure you want to upgrade?
Do you want to continue? (y/n)y

 

Please confirm again. Are you sure you want to upgrade using uploaded file?
Do you want to continue? (y/n)y

 

Please wait for system to restart.

 

The device will be booted back with the newly uploaded firmware.

 

Note:

Ensure the firmware is downloaded from support.fortinet.com, follow the below KB article for the same:

Technical Tip: How to manually download Firmware of FortiGate and how to upload it on FortiGate