Upgrading Fortimanager/Fortigate

[sedda]

So quick question

I have upgraded Fortimanager, and a test fortigate to 7.2, the eventual plan is everything upgraded to 7.2.

At the moment I cannot import configuration because 'device firmware is different to adom version', should I upgrade the adom version from 7.0 to 7.2 next before upgrading all the gates?

[kumarh]

Yes, you should upgrade the ADOM version from 7.0 to 7.2 before doingan the upgrade of all FortiGates. The ADOM version needs to match the firmware version of the devices it manages.

[VinayHM]

Hi 

Please check the compatibility, before upgrading the OS.

https://docs.fortinet.com/compatibility-tool/fortimanager

Regards,

[LvdS]

The docs of Fortimanager recommend you first upgrade all the fortigates in the ADOM and then upgrade the ADOM. 

Upgrading the firmware of managed devices | FortiManager 7.2.0 | Fortinet Document Library

If you initial plan is to have some fortigates on 7.2 and some on 7.0 in the same ADOM, you'll have to upgrade the ADOM for it to work with both at the same time.

[Toshi_Esumi]

Also the Admin Guide clearly says ADOM version 'N' can handle both device version 'N' and 'N+1'.
https://docs.fortinet.com/document/fortimanager/7.2.6/administration-guide/424836/adom-versions

So, the question is what you exactly meant by "cannot import configuration".
If a 7.0.x FGT is in an ADOM:7.0, and you upgraded the FGT to 7.2.x, "Auto-update" should have happened to the config database with the 7.2.x version and it shouldn't give you any errors.

Toshi

[LvdS]

Cannot import the policy pacjage referes to the expected behaviour of mixed mode, it cannot import another fortigate firmware levels config: https://docs.fortinet.com/document/fortimanager/7.2.6/administration-guide/552131/using-mixed-versio... 

That said, if you just install the config it will work.