FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Rajan_kohli
Staff
Staff
Article Id 345516
Description This article contains the lists of resources related to firmware upgrade on Fortigate and issues faced after the upgrade.
Scope FortiGate.
Solution

Before the Upgrade:

 Is the recommended Upgrade Path followed: Fortinet Document Library | Upgrade Path Tool

 

After the Upgrade:

  1. What is the 'Current FortiOS version' and 'Upgrade to FortiOS version': Make sure FortiGate is showing the firmware version that matches what was planned.
  2. Make sure the proper upgrade path is followed if not recommended steps are:

 

If Upgrading via local firmware image:

Follow the articles below to manually perform a firmware upgrade from GUI or CLI:

How to manually download Firmware of FortiGate and how to upload it on FortiGate

How to manually perform a firmware upgrade from the GUI

 

If unable to boot the firewall or load firmware image:

Unable to boot the firewall or load firmware image

 

If no firmware is available to download from Fortiguard under firmware management:

No firmware available from FortiGuard under firmware management

 

If the unit fails to upgrade FortiOS:

  1. Can the unit still power on? What is the LED status on the front panel?
    If there are no lights, and no console output, power cycle the FortiGate. If it still gets the same result then the unit is dead, open a TAC Ticket.
  2.  After power-cycling the unit, is there any console output? If yes, collect the logs and open a TAC Ticket.
  3. Be sure that the right FortiOS image is selected for the correct platform. If not sure, open a TAC Ticket.
  4. If there are issues uploading images to the device, ensure the TFTP server is running.
  5. If the firmware upgrade does not load properly, or the unit does not show a login prompt after booting or continuously reboots, it is best to perform a fresh install of the firmware from a reboot using the CLI.
  6. For units with BIOS version 50001000 or 6000100 (or newer) due to an enhanced BIOS-level signature and file integrity checking, the user cannot directly downgrade FortiOS to 6.0/6.2 or any other OS versions below v6.4.13/v7.0.12/v7.2.5/v7.4.0, a workaround will be needed, open a TAC Ticket for more information.