Downgrade firmware on HA cluster

[chilun]

Can anyone tell me the correct procedure to downgrade the HA cluster?

I had upgraded to 5.2.13 from 5.2.12, after upgrading, the application control not working.

Will it lose all the configuration on the machine such as IP settings or password?

[robdog]

I understand that you are on 5.2 but the logic is the same for most versions.

You should read these articles..

http://help.fortinet.com/fos50hlp/50/index.html#page/FortiOS%25205.0%2520Help/HA_maintenance.085.33....

http://help.fortinet.com/...operatingDowngrade.htm

Hope they help you.

[rdumitrescu]

Hi chilun,

you can boot from the other partition (5.2.12)

from cli you need to understand which partition you are currently using:

example:

diagnose sys flash list Partition Image TotalSize(KB) Used(KB) Use% Active 1 FGT60D-6.00-FW-build0076-180329 253871 53101 21% No 2 FGT60D-6.00-FW-build0131-180604 253871 53804 21% Yes

and then set the other partition as "active"

execute set-next-reboot <primary/secondary>

in this way the configuration will be  the same as before the upgrade

[chilun]

Hi rdumitrescu,

Thank you so much for your reply, your suggestion seems a simple way to go back to the previous firmware version. At this morning, when I prepare to downgrade my box, the Application Control suddenly works again.

So happy I have no need to confront any unexpected risk to get the downgrade for my box.

Thanks again.

[chilun]

I have seen this article before, it is a little bit complicated method.

Anyway, thanks.