Description
This article describes how to resolve a scenario where no new firmware is listed in the Firmware Management section of the GUI.
Scope
FortiGate, FortiGuard.
Solution
- Run the following commands to make sure that the FortiGuard Distribution Network has the images updated on FDN Servers.
diagnose fdsm image-upgrade-matrix
diagnose fdsm image-list
diagnose fdsm fds-update
diagnose fdsm image-list
diagnose fdsm fds-update
The above commands will list all the compatible firmware images & versions that are retrieved from FDN. If this is successful, there will be no issues communicating with the FortiGuard distribution list.
Note:
In case of a new device, such as the G series, and there is no available upgrade/downgrade path, the result will show an error for those commands.
Note:
The above issue (screenshot with 'Result=Error') may also be seen sometimes when the unit is having difficulty connecting to FortiGuard services.
In such cases, below logs can be seen from the output of 'diagnose debug application update -1'.
2025-10-18 02:18:19 do_update[744]-Starting now UPDATE (final try) <-----
2025-10-18 02:18:19 upd_fds_create_list[1295]-No server found for update[00000001] <-----
2025-10-18 02:18:19 __update_upd_comp_by_settings[499]-Disabling FLEN components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[503]-Disabling NIDSDB/ISDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[507]-Disabling MUDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[511]-Disabling FMWPDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[515]-Disabling APPDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[519]-Disabling IOTDB/OTDB components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[527]-Disabling AVEN components.
2025-10-18 02:18:19 __update_upd_comp_by_settings[531]-Disabling AVDB/FLDB/MMDB components.
2025-10-18 02:18:19 do_update[755]-UPDATE failed <-----
- allow-remote-firmware-upgrade is enabled by default. If it was disabled previously, enable it by running the following command:
config system central-management
set allow-remote-firmware-upgrade enable
end
This will enable remotely upgrading the firmware on this FortiGate from the central management server (FortiGuard by default).
After this change, it will be possible to find the recommended firmware:
If FortiGuard Firmware is still not available, it may be because the current FortiOS version has reached End of Support (EOS). In this case, manually upgrade the FortiGate to a supported version. After that, all the images should be visible.
3. Try to restart the FortiCloud daemon and check again after some time:
fnsysctl killall forticldd
After restarting the process, force an update. The debug output will show the image list and upgrade matrix being updated.
FGT # diagnose debug application update -1
FGT # diagnose debug console timestamp enable
FGT # diagnose debug enable
FGT # execute update-now
FGT # 2025-08-08 08:14:38 [3315] fds_handle_request: Received cmd 117 from pid-25131, len 4
2025-08-08 08:14:38 [3327] fds_handle_request: Image list was updated within 86400 secs.
2025-08-08 08:14:38 [470] fds_send_reply: Sending 6128 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 116 from pid-25133, len 0
2025-08-08 08:14:48 [470] fds_send_reply: Sending 8 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 116 from pid-25133, len 0
2025-08-08 08:14:48 [470] fds_send_reply: Sending 8 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 101 from pid-25133, len 0
2025-08-08 08:14:48 [42] fds_queue_task: req-101 is added to message-controller
2025-08-08 08:14:51 [3315] fds_handle_request: Received cmd 117 from pid-25131, len 4
2025-08-08 08:14:51 [3327] fds_handle_request: Image list was updated within 86400 secs.
2025-08-08 08:14:51 [470] fds_send_reply: Sending 6128 bytes data.
2025-08-08 08:14:51 [3315] fds_handle_request: Received cmd 119 from pid-25133, len 4
2025-08-08 08:14:51 [3343] fds_handle_request: Upgrade matrix was updated within 86400 secs.
Alternatively, it is possible to manually download the firmware from the Support portal:
- Log in to the support portal (support.fortinet.com).
- Go to Download -> Firmware Images.
- Choose FortiGate -> Download and choose the file for FortiGate with the .out file format.
Notes: Versions 5.0 up to 7.0 are End of Engineering Support (EOES). Consider upgrading the firmware level on the device to a supported version (7.2 up to 7.6). Here, check the firmware path and compatibility depending on the hardware: Upgrade Path Tool Table.
FortiGate must have a valid support contract (Firmware & General Updates) and be registered.
Related documents:
- Technical Tip: Product Life Cycle Information on Fortinet products
- Technical Tip: Manual firmware upgrade by referring to an upgrade path
- Troubleshooting Tip: Troubleshoot when no new firmware is available in the Firmware Management secti...
- Prevent FortiGates with an expired support contract from upgrading to a major or minor firmware rele...
