FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
jasonhong
Staff
Staff
Article Id 255729
Description

This article describes how to check and confirm the upgrade path for a managed device in FortiManager.

Scope FortiManager.
Solution

1) Prior to using FortiManager to push a multi-step firmware upgrade on a managed device, the user can confirm if the upgrade path matches the path outlined on the Fortinet Support Portal/Upgrade Tool.

 

To confirm the upgrade path, the user can run the below CLI command in FortiManager for the specific device.

 

diag fwmanager show-dev-upgrade-path <device name> <target firmware>

 

2) For this demonstration, it is possible to confirm the upgrade path for a managed device that is to be upgraded from version 6.4.12 to 7.2.4. From the below CLI output, it is possible to verify that the upgrade path for managed device 'FortiGate-Test' is 6.4.12 > 7.0.11 > 7.2.4.

 

diag fwmanager show-dev-upgrade-path ?

<devname>       device name. Available:

FortiGate-Test (id:165, version:6.4.12-2060)

 

diag fwmanager show-dev-upgrade-path FortiGate-Test 7.2.4

FortiGate-Test(165): ->7.0.11-b489-M ->7.2.4-b1396-F

 

3) To confirm if the upgrade path from the FortiManager CLI output matches the path outlined on the Fortinet Support Portal/Upgrade Tool, the user can verify and crosscheck the upgrade path in the Fortinet Support Portal or Upgrade Tool.

 

Go to Fortinet Support Portal (support.fortinet.com) -> Support -> Firmware Download -> Select Product -> FortiGate -> Upgrade Path.

 

Or

 

Upgrade Path Tool (docs.fortinet.com/upgrade-tool)

 

upgrade_path.png

 

Related article:

Technical Tip: How to perform scheduled upgrade for FortiGates using FortiManager