Understanding The FortiGate Upgrade Process Using FortiManager

This article provides an overview of the FortiGate upgrade process and the tasks performed in both FortiManager and FortiGate.

FortiManager

During the upgrade process, multiple tasks are triggered simultaneously on both FortiManager and FortiGate.

Checks and retrieves the firmware image from local storage or FortiGuard.
Performs a disk check on the FortiGate.
Pushes the firmware image to FortiGate (during this step, FortiGate reboots and the FGFM tunnel goes down).
After FortiGate reboots and the FGFM tunnel comes back up, FortiManager automatically retrieves the configuration status.
Task is marked as complete.

Receives the firmware image from FortiManager (image with valid RSA signature is logged in Event Log).
FGFM tunnel becomes inactive (Central Management).
FortiGate reboots.
FGFM tunnel becomes active again (Central Management restored).

The following CLI commands provide a summary report of upgrade tasks in FortiManager:

diagnose fwmanager report list-device-report <adom_name>

This command generates a detailed report for the FortiGate, including task status, firmware versions, and health checks.

Example output highlights:

diagnose fwmanager report device-report-summary <adom_name>

This provides a high-level summary showing the FortiGate firmware version before and after the upgrade.

Here is your content cleaned and properly formatted:

preve-kvm05 # diagnose fwmanager report device-report-summary lala

Total number: 1

name oid taskid from to start-time end-time profile
FortiGate-81F 299 18 7.4.4-b2662 7.4.6-b2726 2025-XX-XX 16:02 2025-XX-XX 16:09 tutu