FortiManager Firmware: Download & Import Like a Pro
Description
Learn how to import firmware images into FortiManager manually or via FortiGuard. Step-by-step guide with screenshots and best practices.
Scope
This guide explains how to download and import firmware images into FortiManager. It is useful for both beginners and experienced users managing FortiGate upgrades.
It covers:
- Automatic firmware download via FortiGuard
- Manual firmware import method
- GUI navigation steps
- CLI verification and requirements
Solution
Method 1: Automatic Firmware Download (FortiGuard)
When you upgrade a device using FortiManager, the system can automatically download firmware.
Steps:
- Go to:
More → Firmware Upgrade - Select your FortiGate device
- Choose a firmware version from the list
- FortiManager downloads the image from FortiGuard
- Upgrade process starts automatically
Method 2: Manual Firmware Download & Import (Recommended)
If you want more control, you can manually download firmware and import it.
Step 1: Download Firmware
- Go to Fortinet Support Portal:
👉 https://support.fortinet.com/Download/FirmwareImages.aspx - Download the required firmware image
Step 2: Import Firmware into FortiManager
Navigate to:
FortiGuard → Firmware Images → Local Images → Import
Upload the downloaded firmware file.
Step 3: Use Imported Firmware
Once imported:
- The firmware appears under Local Images
- You can select it during upgrade
Why Use Manual Import?
Manual import provides key advantages:
- Faster upgrades (no download delay)
- Useful in restricted networks
- More control over firmware versions
- Reliable for large deployments
Important Prerequisites (MUST FOLLOW)
Before upgrading, ensure:
1. Backup Configuration
- Backup FortiGate config
- Backup FortiManager config
⇒ Prevents data loss if upgrade fails
2. Verify Firmware Contract
Make sure the device has a valid firmware contract.
Run this CLI command:
diagnose fmgupdate dbcontract <FortiGate Serial Number>
✔ Check:
- “FMWR” section
- Contract expiry date
⇒ Firmware upgrade will fail without a valid contract
Notes / Best Practices
- Always verify FortiManager connection to FortiGuard
- Use local images for faster deployment
- Never skip configuration backup
- Confirm compatibility before upgrading
- Use correct firmware for your device model
FAQ
Can FortiManager download firmware automatically?
Yes, it downloads from FortiGuard during upgrade.
Why import firmware manually?
It reduces upgrade time and avoids download delays.
Where are imported images stored?
In:
FortiGuard → Firmware Images → Local Images
What happens if contract is invalid?
Firmware upgrade will fail or be blocked.
Is backup really necessary?
Yes, it helps restore the system if something goes wrong.