Description
This article describes what are the parameters to check when no new firmware shows available in the FortiGate GUI.
Scope
FortiGate.
Solution
- Check if the internet is working fine.
- Check that DNS is working fine from FortiGate.
- Check the FortiGuard connectivity is up:
diagnose debug rating
If the FortiGuard is down, it is possible to take the debug:
diagnose debug application update -1
diagnose debug enable
execute update-now
Note:
In case of a new device, such as the G series, and there is no available upgrade/downgrade path, the result will show an error for those commands.
Check whether allow-remote-firmware-upgrade is enabled under central management:
config system central-management
set allow-remote-firmware-upgrade enable
end
Use this to get the list of images:
diagnose fdsm image-list
Do the following changes:
config system fortiguard
set update-server-location any
set sdns-server-ip "208.91.112.220" "194.69.172"
set source-ip X.X.X.X <----- IP assigned to the external interface going to the internet.
end
Try to restart the forticldd process:
fnsysctl killall forticldd
After restarting the process, force an update. The debug output will show the image list and upgrade matrix being updated.
FGT # diagnose debug application update -1
FGT # diagnose debug console timestamp enable
FGT # diagnose debug enable
FGT # execute update-now
........
FGT # 2025-08-08 08:14:38 [3315] fds_handle_request: Received cmd 117 from pid-25131, len 4
2025-08-08 08:14:38 [3327] fds_handle_request: Image list was updated within 86400 secs.
2025-08-08 08:14:38 [470] fds_send_reply: Sending 6128 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 116 from pid-25133, len 0
2025-08-08 08:14:48 [470] fds_send_reply: Sending 8 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 116 from pid-25133, len 0
2025-08-08 08:14:48 [470] fds_send_reply: Sending 8 bytes data.
2025-08-08 08:14:48 [3315] fds_handle_request: Received cmd 101 from pid-25133, len 0
2025-08-08 08:14:48 [42] fds_queue_task: req-101 is added to message-controller
2025-08-08 08:14:51 [3315] fds_handle_request: Received cmd 117 from pid-25131, len 4
2025-08-08 08:14:51 [3327] fds_handle_request: Image list was updated within 86400 secs.
2025-08-08 08:14:51 [470] fds_send_reply: Sending 6128 bytes data.
2025-08-08 08:14:51 [3315] fds_handle_request: Received cmd 119 from pid-25133, len 4
2025-08-08 08:14:51 [3343] fds_handle_request: Upgrade matrix was updated within 86400 secs
Alternatively, it is possible to manually download the firmware from the Support portal:
- Log in to the support portal (support.fortinet.com).
- Go to Download -> Firmware Images.
- Choose FortiGate -> Download and choose the file for FortiGate with the .out file format.
Related articles:
Troubleshooting Tip: No firmware available from FortiGuard under firmware management
Technical Tip: How to control/change the FortiGate source IP for self-generated traffic
