How to Schedule FortiGate Upgrades in 5 Easy Steps
Description
Learn how to Schedule FortiGate Upgrades using FortiManager firmware templates. Perform safe, efficient updates with automation, planning, and guided steps.
Scope
Uploading firmware images manually to Schedule FortiGate Upgrades.
Creating firmware templates to Schedule FortiGate Upgrades.
Configuring upgrade schedules to Schedule FortiGate Upgrades.
Assigning templates to FortiGate devices to Schedule FortiGate Upgrades.
Monitoring upgrade progress to Schedule FortiGate Upgrades.
Solution
If the FortiManager is operating in a closed network and is unable to download FortiGuard images, it is possible to manually upload firmware into FortiManager to Schedule FortiGate Upgrades under:
FortiGuard -> Local Images -> Import -> Upload the firmware
Create a new firmware template by navigating to:
Device Manager -> Firmware Templates
and selecting ‘Create New’.
Under ‘Upgrade Details’, select ‘Create New’ in the firmware template and then select the appropriate product, platform, and version to be upgraded to.
Under ‘Install Window’, select the schedule type and select the start time and end time for the upgrade activity.
The start time specifies the time to start the upgrade, whereas the end time specifies the time to end the upgrade.
It is also a best practice to select the ‘Follow The Recommended Upgrade Path’ option under Upgrade Options.
Note
If the upgrade is not completed by the end time, the upgrade stops.
Assign the firmware template to the device to be upgraded.
When the firmware template is running at the scheduled time, a notification will appear on the FortiManager showing the progress of the managed device upgrade that is taking place.
After the upgrade has been completed, the notification disappears, and it is possible to verify the firmware version both on FortiManager and FortiGate.
Troubleshooting
On FortiManager
execute tac report
diagnose fwmanager fwm-log
On the FortiGate
execute tac report
While performing the upgrade, on the FortiManager side
diagnose debug application fgfmsd 255
FAQ
Can FortiManager upgrade FortiGates automatically?
Yes. FortiManager can schedule and perform firmware upgrades for managed FortiGate devices using firmware templates.
What should be done if FortiManager cannot download FortiGuard images?
Download the firmware image manually from the support portal and upload it under:
FortiGuard -> Local Images -> Import
What happens if the upgrade exceeds the configured end time?
If the upgrade is not completed by the end time, the upgrade stops.
Where can firmware templates be created in FortiManager?
Navigate to:
Device Manager -> Firmware Templates
and select Create New.
How can upgrade progress be monitored?
A notification appears on FortiManager during the scheduled upgrade showing the progress of the managed device upgrade.