FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
jasonhong
Staff & Editor
Staff & Editor
Article Id 255729
Description

This article describes how to check and confirm the upgrade path for a managed device in FortiManager.

Scope FortiManager.
Solution

1) Prior to using FortiManager to push a multi-step firmware upgrade on a managed device, the user can confirm if the upgrade path matches the path outlined on the Fortinet Support Portal/Upgrade Tool.

 

To confirm the upgrade path, the user can run the below CLI command in FortiManager for the specific device.

 

diag fwmanager show-dev-upgrade-path <device name> <target firmware>

 

2) For this demonstration, it is possible to confirm the upgrade path for a managed device that is to be upgraded from version 6.4.12 to 7.2.4. From the below CLI output, it is possible to verify that the upgrade path for managed device 'FortiGate-Test' is 6.4.12 > 7.0.11 > 7.2.4.

 

diag fwmanager show-dev-upgrade-path ?

<devname>       device name. Available:

FortiGate-Test (id:165, version:6.4.12-2060)

 

diag fwmanager show-dev-upgrade-path FortiGate-Test 7.2.4

FortiGate-Test(165): ->7.0.11-b489-M ->7.2.4-b1396-F

 

3) To confirm if the upgrade path from the FortiManager CLI output matches the path outlined on the Fortinet Support Portal/Upgrade Tool, the user can verify and crosscheck the upgrade path in the Fortinet Support Portal or Upgrade Tool.

 

Go to Fortinet Support Portal (support.fortinet.com) -> Support -> Firmware Download -> Select Product -> FortiGate -> Upgrade Path.

 

Or

 

Upgrade Path Tool (docs.fortinet.com/upgrade-tool)

 

upgrade_path.png

 

Related article:

Technical Tip: How to perform scheduled upgrade for FortiGates using FortiManager