FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ibituya
Staff
Staff
Article Id 389744
Description

This article describes how to resolve the issue of permission denied error when trying to disable automatic patch upgrades on a FortiGate managed by a FortiManager.

Scope

FortiGate, FortiManager.

Solution

The following error may show when trying to disable the automatic patch upgrades on the FortiGate:

 

permission_denied.PNG

 

This error is shown when the FortiGate is managed by a FortiManager. The error also shows up regardless of whether the FortiGate login is with read-write permissions. The setting also cannot be changed from the CLI.

 

permission_denied_cli.PNG

 

To disable the automatic patch upgrades, the setting must be changed in FortiManager and pushed to the FortiGate.

 

Refer to the following steps to disable automatic patch upgrades from FortiManager:

 

  1. Log in to FortiManager and select the managed FortiGate.

 

fmg_1.PNG

 

  1. Go to System -> FortiGuard -> disable the Auto Firmware Upgrade setting -> Apply.

     

    fmg_2.PNG

  2. The config status will be 'Modified'. Install the changes to the FortiGate.

     

     

    fmg_3.PNG

  3. Select Install Preview before installing the change to verify that only the expected changes will be pushed to the managed FortiGate.

     

    fmg_4.png

  4. After successful installation, the automatic patch upgrades should already be disabled on the FortiGate.

     

fmg_5.png

 

disabled.PNG