Reverting To A Previous Firmware Version Using The Cli - Fortinet FortiGate FortiGate-100A Install Manual

Reverting to a previous firmware version

Reverting to a previous firmware version using the CLI

78
Downgrading the firmware to a previous version will revert the FortiGate unit to its
factory default configuration and deletes IPS custom signatures, web content lists,
email filtering lists, and changes to the replacement messages.
Before beginning this procedure, it is recommended that you:
• back up the FortiGate unit system configuration using the command execute
backup config
• back up the IPS custom signatures using the command execute backup
ipsuserdefsig
• back up web content and email filtering lists
For more information, see the
If you are reverting to a previous FortiOS version (for example, reverting from
FortiOS v3.0 to FortiOS v2.80), you might not be able to restore your previous
configuration from the backup configuration file.
Note: Installing firmware replaces the current antivirus and attack definitions, along with the
definitions included with the firmware release you are installing. After you install new
firmware, make sure that antivirus and attack definitions are up to date. For details, see the
FortiGate Administration
update_now to update the antivirus and attack definitions.
Note: To use this procedure, you must log in using the admin administrator account, or an
administrator account that has system configuration read and write privileges.
To use the following procedure, you must have a TFTP server the FortiGate unit
can connect to.
To revert to a previous firmware version using the CLI
1 Make sure the TFTP server is running.
2 Copy the firmware image file to the root directory of the TFTP server.
3 Log into the FortiGate CLI.
4 Make sure the FortiGate unit can connect to the TFTP server.
You can use the following command to ping the computer running the TFTP
server. For example, if the TFTP server's IP address is 192.168.1.168:
execute ping 192.168.1.168
5 Enter the following command to copy the firmware image from the TFTP server to
the FortiGate unit:
execute restore image TFTP <name_str> <tftp_ipv4>
Where <name_str> is the name of the firmware image file and <tftp_ip4> is
the IP address of the TFTP server. For example, if the firmware image file name is
v28image.out and the IP address of the TFTP server is 192.168.1.168, enter:
execute restore image TFTP v28image.out 192.168.1.168
The FortiGate unit responds with the message:
This operation will replace the current firmware version!
Do you want to continue? (y/n)
FortiGate-60 series and FortiGate-100A FortiOS 3.0 MR4 Install Guide
FortiGate Administration
Guide. You can also use the CLI command
FortiGate Firmware
Guide.
execute
01-30004-0266-20070831