FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
adimailig
Staff
Staff
Article Id 299482
Description This article describes actions to consider when performing a FortiGate firmware upgrade from the FortiGate Cloud Portal.
Scope FortiGate, FortiGate Cloud/
Solution

Firmware upgrade from FortiGate Cloud Portal is only available for devices with paid subscriptions.
See the document for a feature comparison of free and paid subscriptions:

Feature comparison 

To upgrade, follow the instructions provided in the below guides.

 

Before the firmware upgrade, make sure that 'allow-remote-firmware-upgrade' is enabled under central-management.

config system central-management
    set mode normal
    set type fortiguard
    set allow-remote-firmware-upgrade enable
end

 

Failing to do so will result in the firmware upgrade failing and the status on the Fortigate Cloud task to stuck in In-Progress.
'allow-remote-firmware-upgrade' -> Disable.

 

firmware upgrade task taking long time and status in-progressfirmware upgrade task taking long time and status in-progress

 

Alternatively, FortiGate Cloud will try to push configuration to enable 'allow-remote-firmware-upgrade'.

upgrade3.PNG


If 'allow-push-configuration' is enabled,  it will be accepted by the FortiGate.
Then, re-run the upgrade again from FortiGate Cloud.


config system central-management
    set allow-push-configuration enable
end

 

firmware upgrade task  after re-runfirmware upgrade task  after re-run
Contributors