Fortigate schedulle firmware upgrade

[damianhlozano]

Hello team!

We manage many Fortigate units and we would like to make a firmware upgrade yearly in all units.

Is there a way to accomplish this?  There is not need to schedulle to make this automatically once a year, we prefer to schedulle an upgrade to be run, for example, the wednesday at 1 AM and do the same the next year.

I see this: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/369092/enabling-automatic-fi...

Will the following work?

config system fortiguard
    set auto-firmware-upgrade enable
    set auto-firmware-upgrade-day wednesday
    set auto-firmware-upgrade-delay 0
    set auto-firmware-upgrade-start-hour 1
    set auto-firmware-upgrade-end-hour 3
end

 What does "delay" means? Is this talking about the time between steps?

Thanks in advance.

Regards,

Damián

[adambomb1219]

Yearly?  You aren't upgrading firmware more often than that????

Personally I would use FortiManager for  this use-case.

[damianhlozano]

No, until now we did not have periodical firmware upgrades, just used to upgrade the firmware when this was necesary.

I need to start making periodical firmware upgrades, but I do not have any FortiManager.

Anyone knows the auto-firmware-upgrade options?

Thanks in advance.

Regards,

Damián

[Christian_89]

I know the option about auto upgrade.

I use but do not want the Akutelle firmware is always available.

and with a mature upgrade you have to do it manually anyway.
I would also recommend FortiManager.

[damianhlozano]

I know about FortiManager, but we cannot buy this so far.

Akutelle = Latest ?

Today I ran the commands to configure the auto upgrade, using start time (22 hs) and end time (23 hs), but not specifying a day, when I ran the command to know the next update, this shows me that the next update will run on Wednesday at 01:xx (Do not remember exactly)

Why did it happen?

Any other reccomendation?  Scripts?

Thanks in advance.

Regards,

Damián

[kvimaladevi]

Hi damianhlozano,

In the auto-upgrade settings, delay is to set the number of days the firmware upgrade can be delayed from the mentioned auto-firmware-upgrade-day. If a firmware patch is released and if you do not want to upgrade as soon as it is released, you can set a delay for example 10 days so that the upgrade will be delayed for 10 days and then upgraded.

Regards,

Vimala