Testing A New Firmware Image Before Installing It - Fortinet FortiGate FortiGate-200A Administration Manual

Changing the FortiGate firmware

Testing a new firmware image before installing it

40
config system interface
edit internal
set ip <address_ipv4mask>
set allowaccess {ping https ssh telnet http}
end
After changing the interface address, you can access the FortiGate unit from the
web-based manager and restore the configuration.
• To restore the FortiGate unit configuration, see
• To restore IPS custom signatures, see
files" on page
• To restore web content filtering lists, see
• To restore email filtering lists, see
• To update the virus and attack definitions to the most recent version, see
antivirus and attack definitions" on page
If you are reverting to a previous firmware version (for example, reverting from
FortiOS v2.80 to FortiOS v2.50), you might not be able to restore your previous
configuration from the backup up configuration file.
You can test a new firmware image by installing the firmware image from a system
reboot and saving it to system memory. After completing this procedure the FortiGate
unit operates using the new firmware image with the current configuration. This new
firmware image is not permanently installed. The next time the FortiGate unit restarts,
it operates with the originally installed firmware image using the current configuration.
If the new firmware image operates successfully, you can install it permanently using
the procedure "Upgrading to a new firmware version" on page
For this procedure you:
• access the CLI by connecting to the FortiGate console port using a null-modem
cable,
• install a TFTP server that you can connect to from port1. The TFTP server should
be on the same subnet as port1.
To test a new firmware image
1 Connect to the CLI using a null-modem cable and FortiGate console port.
2 Make sure the TFTP server is running.
3 Copy the new firmware image file to the root directory of the TFTP server.
4 Make sure that port1 is connected to the same network as the TFTP server.
You can use the following command to ping the computer running the TFTP server.
For example, if the TFTP server's IP address is 192.168.1.168:
execute ping 192.168.1.168
5 Enter the following command to restart the FortiGate unit:
execute reboot
299.
"Backup and restore" on page
01-28006-0072-20041105
"Backup and restore" on page
"Backing up and restoring custom signature
"Backup and restore" on page
122.
33.
System status
117.
117.
117.
"Updating
Fortinet Inc.