How to Schedule FortiGate Upgrades in 5 Easy Steps
Description
Learn how to perform scheduled FortiGate upgrades using FortiManager with firmware templates, install Windows, and schedule upgrades efficiently and safely.
Scope
This article is intended for FortiManager administrators, network engineers, and Fortinet professionals who want to schedule firmware upgrades for FortiGate devices using FortiManager.
The article covers:
- Uploading firmware images manually
- Creating firmware templates
- Configuring upgrade schedules
- Assigning templates to FortiGate devices
- Monitoring upgrade progress
- Basic troubleshooting commands
Solution
If the FortiManager is operating in a closed network and is unable to download FortiGuard Images, it is possible to download the firmware image from the support portal and upload it manually into FortiManager under:
FortiGuard -> Local Images -> Import -> Upload the firmware
Create a new firmware template by navigating to:
Device Manager -> Firmware Templates
and selecting ‘Create New’.
Under ‘Upgrade Details’, select ‘Create New’ in the firmware template and then select the appropriate product, platform, and version to be upgraded to.
Under ‘Install Window’, select the schedule type and select the start time and end time for the upgrade activity.
The start time specifies the time to start the upgrade, whereas the end time specifies the time to end the upgrade.
It is also a best practice to select the ‘Follow The Recommended Upgrade Path’ option under Upgrade Options.
Note
If the upgrade is not completed by the end time, the upgrade stops.
Assign the firmware template to the device to be upgraded.
When the firmware template is running at the scheduled time, a notification will appear on the FortiManager showing the progress of the managed device upgrade that is taking place.
After the upgrade has been completed, the notification disappears, and it is possible to verify the firmware version both on FortiManager and FortiGate.
Troubleshooting
On FortiManager
execute tac report
diagnose fwmanager fwm-log
On the FortiGate
execute tac report
While performing the upgrade, on the FortiManager side
diagnose debug application fgfmsd 255
FAQ
Can FortiManager upgrade FortiGates automatically?
Yes. FortiManager can schedule and perform firmware upgrades for managed FortiGate devices using firmware templates.
What should be done if FortiManager cannot download FortiGuard images?
Download the firmware image manually from the support portal and upload it under:
FortiGuard -> Local Images -> Import
What happens if the upgrade exceeds the configured end time?
If the upgrade is not completed by the end time, the upgrade stops.
Where can firmware templates be created in FortiManager?
Navigate to:
Device Manager -> Firmware Templates
and select Create New.
How can upgrade progress be monitored?
A notification appears on FortiManager during the scheduled upgrade showing the progress of the managed device upgrade.