Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com
Ahead of the Threat. FCNSA v5 / FCNSP v5
Fortigate 1000C / 1000D / 1500D
Usually I do not upgrade my Fortigate/FortiWiFi units to a GA release but this time I broke my own rule. I' ve upgraded a FortiWiFi unit (FWF-80CM) in one of our remote locations from FortiOS v5.0.7 to v5.2.0 and ...almost immediately was punished for being inpatient: the unit fell into " conserve mode" . I have opened a case with Fortinet. I think though that it is not necessarily a problem with the new release of FortiOS as such. The thing is that with every release of FortiOS, it is gradually becoming more and more resource-consuming. So gap between FortiOS' demand on CPU' s number-crunching abilities as well as on memory capacity and what resources actual hardware could offer keeps growing. ...especially if your box was purchased a while ago. In our case it seems to be not so much a CPU problem as a lack of memory issue. With a comparatively simple configuration and logging disabled memory utilization consistently stays at ~80%. ...even under a very light traffic. So if you have one of those older Fortigate/FortiWiFi boxes (revision 1 of FG-80C, FG-80CM, FWF-80CM, ...) with just 512MB of RAM - good luck with FortiOS 5.2.0! Second generation of FortiGate-80C model line has twice as more memory (thanks to rwpatterson for putting excellent hardware reference here), so it should not be an issue here.
Unwritten IS policy #1: Never on a Friday! (unless you want to spend the better part of your weekend fixing it...)op Just have a fall back plan. I upgrade 2 low critical devices and had problems one requiring a format, reboot, tftp upgrade. I found a slew of problems some cosmetic to service impacting. What you should do, is to look at the risk involved if something goes wrong. On one site I was pushed with having to send a spare unit out form a nearby office. The other side was in my control so it wasn' t greatly impact. I personally would wait for 1-2months unless you " just have to upgrade " and see what else is found and posted by this forum , TAC and other members. My rule of thumbs matches that of rwpatterson , but I also typically don' t upgrade into a new release until there' s a minor release for that release so a 5.2.1
PCNSE
NSE
StrongSwan
I personally would wait for 1-2months unless you " just have to upgrade " and see what else is found and posted by this forum , TAC and other members.From personal perspective I fully agree with you. " Flip side of a coin" though is that those who do all this " dirty job" of stepping into " unknown territory" , save the rest of us from " riding through the same bumpy and dangerous road" by sharing their experiences. That' s what makes humans different from other living things. When I opened this thread I was trying to " be smart" and learn from " other members" experiences. Unfortunately there was no overwhelming number of responses to this call. So I decided to roll my own sleeves... Well, now at least I could share my own proven experience: if you have a FG/FWF unit with 512MB of memory - don' t expect it to work properly on FortiOS v5.2.0 ...unless you disable logging, device detection, AV, web-content filtering, IPS and so forth ...essentially everything except power button. And this is despite the fact that your particular model might be listed among supported in the release notes.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1557 | |
1033 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.