FortiGate Firmware
FortiGate-5000 series Installation Guide
01-28011-0259-20060210
47
Before beginning this procedure you can:
•
Back up the FortiGate-5000 module system configuration using the command
execute backup config
.
•
Back up the IPS custom signatures using the command
execute backup
ipsuserdefsig
•
Back up web content and email filtering lists.
For information, see
the
FortiGate Administration Guide
.
If you are reverting to a previous FortiOS version (for example, reverting from FortiOS
v2.80 to FortiOS v2.50), you might not be able to restore your previous configuration
from the backup configuration file.
To use the following procedure you must have a TFTP server that the FortiGate-5000
module can connect to.
To revert to a previous firmware version using the CLI
1
Make sure that the TFTP server is running.
2
Copy the firmware image file to the root directory of the TFTP server.
3
Log into the FortiGate CLI.
4
Make sure the FortiGate-5000 module can connect to the TFTP server.
You can use the following command to ping the computer running the TFTP server.
For example, if the TFTP server's IP address is 192.168.1.168:
execute ping 192.168.1.168
5
Enter the following command to copy the firmware image from the TFTP server to the
FortiGate-5000 module:
execute restore image <name_str> <tftp_ipv4>
Where
<name_str>
is the name of the firmware image file and
<tftp_ip>
is the IP
address of the TFTP server. For example, if the firmware image file name is
FGT_300-v280-build158-FORTINET.out
and the IP address of the TFTP server
is 192.168.1.168, enter:
execute restore image FGT_300-v280-build158-FORTINET.out
192.168.1.168
The FortiGate-5000 module responds with the message:
This operation will replace the current firmware version!
Do you want to continue? (y/n)
Note:
Installing firmware replaces the current antivirus and attack definitions with the definitions
included with the firmware release that you are installing. After you install new firmware, use the
procedure o make sure that antivirus and attack definitions are up to date. For details see the
FortiGate Administration Guide
. You can also use the CLI command
execute
update_now
to update the antivirus and attack definitions.
Note:
To use this procedure you must login using the admin administrator account, or an
administrator account that has system configuration read and write privileges.
