Fortigate Upgrade

[omkam]

I want to upgrade Fortigate firmware from 6.2.5 to 6.2.6 (Same Vdom)

Also, I have fortimanager in my environment... So can I upgrade Fortigate firmware directly through Fortigate firewall settings or should I upgrade firmware from Fortimanager and push it in firewall

Please suggest what is the best practice for upgrade of Fortigate firmware Image

1) Uploading firmware image through Fortigate!!

2) Uploading fortigate firmware image through Fortimanager and push it on Fortigate!!

[sashish · Accepted solution]

Hi Omkam, 

Yes you can directly upgrade from FortiGate. 

https://docs.fortinet.com/document/fortigate/6.4.5/administration-guide/596131/upgrading-the-firmwar... 

If you want to push upgrade from FortiManager, make sure the FGT is registered to FortiManager. You can follow below article. 

https://docs.fortinet.com/document/fortimanager/5.6.0/upgrading-managed-fortigates/663588/step-1-upg...  

Let me know if this helps you. 

I would suggest you to push upgrade from FortiManager if you have multiple FGT and you want to upgrade in same time interval. 

Regards, 

Ashish Sharma. 

[Mohamed_Gaber]

 Uploading firmware image through Fortigate is available. In GUI 

https://www.youtube.com/watch?v=Xr3rWKvqBbI

[omkam]

Hello Mohamed,

Thank you for your response. I know that we can upload through Fortigate.

My concern was can we directly upgrade through Fortigate or should we upgrade the firmware Via Fortimanager??

[sashish · Accepted solution]

Hi Omkam, 

Yes you can directly upgrade from FortiGate. 

https://docs.fortinet.com/document/fortigate/6.4.5/administration-guide/596131/upgrading-the-firmwar... 

If you want to push upgrade from FortiManager, make sure the FGT is registered to FortiManager. You can follow below article. 

https://docs.fortinet.com/document/fortimanager/5.6.0/upgrading-managed-fortigates/663588/step-1-upg...  

Let me know if this helps you. 

I would suggest you to push upgrade from FortiManager if you have multiple FGT and you want to upgrade in same time interval. 

Regards, 

Ashish Sharma. 

[omkam]

Hello Ashish,

Thank U for your response. This will be helpful for my future reference

I just needed the best practice to upgrade the Fortigate firmware version even if it is for single firewall

[sw2090 · Accepted solution]

the advantage of pushing it via FMG is that you can schedule it. That is a good thing for FGT that are productive and need to updated at a specific time.

Besides that it doesn't matter wether you update the FGT via the gui or via FMG. If you do via gui the FMG will be notified that the FGT was updated. 

As long as you follow the recommended upgrade path there should n't be any trouble.

I did a lot of upgrading directly on FGTs that are in my FMG and it never caused any trouble.

I also did the last round of upgrades (from 6.4.11 to 7.0.9) via FMG scheduling and it also did not cause any problems.