Help
FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
hlngan
Staff
Staff

Created on ‎10-03-2025 07:03 AM Edited on ‎12-15-2025 10:17 PM By Staff

Article Id 413041

Troubleshooting Tip: A valid upgrade path cannot be determined for manually uploaded firmware

Description This article describes the error message 'A valid upgrade path cannot be determined for manually uploaded firmware' even when the upgrade path and image are valid.
Scope FortiGate.
Solution

This is because FortiGate will access the FortiGuard server to check the valid upgrade path.

  • If the FortiGate does not have internet access:

 

image.png

 

When upgrading with a manually uploaded image to the FortiGate, a message will be shown:

 

Example from v7.2.x:

 

image (1).png

 

Example from v7.4.x:

 

Error_Message_when_Upgrading_Fortigate_to_v7.4.9.png

 

If the correct upgrade path is followed and the image is valid, the message can be ignored and the upgrade can proceed.

 

Check the upgrade path using the Upgrade Path Tool or the Fortinet Support Portal.

Refer to Technical Tip: How to verify FortiGate Upgrade path to upgrade the FortiGate to a higher Firmware Ve... for more details.

 

  • The same message shown in the above snapshot is also displayed if the FortiGate cannot resolve the FQDN due to a DNS issue/reachability. 

kb2.PNG

 

Special note: 

In the FortiGate virtual machine in v7.4. x andv 7.6.x,  despite the FortiGate can retrieve the correct image list from the command below 

 

kenobi-kvm56 # diagnose fdsm image-list | grep 7.4
07004000FIMG0013704009 v7.4 MR4-GA-M P9 b2829 (upgrade)
07004000FIMG0013704007 v7.4 MR4-GA-M P7 b2731 (downgrade)
07004000FIMG0013704006 v7.4 MR4-GA-M P6 b2726 (downgrade)
07004000FIMG0013704005 v7.4 MR4-GA-M P5 b2702 (downgrade)
07004000FIMG0013704004 v7.4 MR4-GA-F P4 b2662 (downgrade)
07004000FIMG0013704003 v7.4 MR4-GA-F P3 b2573 (downgrade)
07004000FIMG0013704002 v7.4 MR4-GA-F P2 b2571 (downgrade)
07004000FIMG0013704001 v7.4 MR4-GA-F P1 b2463 (downgrade)
07004000FIMG0013704000 v7.4 MR4-GA-F b2360 (downgrade)

 

However, 'image-upgrade-matrix' has an error from the following command, causing a GUI error to be displayed:

 

kenobi-kvm56 # diagnose fdsm image-upgrade-matrix
Result=Error.

 

BUG 1224484 has been identified for this error message, and this issue has been marked resolved in v7.4.10:2848, v7.6.5:3641, 8.0.0:0097

 

Workaround:

Use the manual upgrade and follow the correct upgrade path.

 

Further steps to troubleshoot and update the FortiGate's list of firmware images and paths can be seen in this KB article: Troubleshooting Tip: No firmware available from FortiGuard under firmware management 

 

1238
Suggest New Article
Article Feedback
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2025 Fortinet, Inc. All Rights Reserved.