Summary of Contents for Fortinet FortiGate FortiGate-5000
Page 1
LED MODE LED MODE FILTER FA N T R AY FA N T R AY Visit http://support.fortinet.com to register your FortiGate-5000 Series product. By registering you can receive product updates, technical support, and FortiGuard services. SERIAL 1 SERIAL 2 ALARM...
Revision history... 5 Warnings and cautions ... 5 About this document... 7 Fortinet documentation... 7 Fortinet Tools and Documentation CD ... 7 Fortinet Knowledge Center ... 7 Comments on Fortinet technical documentation ... 7 Customer service and technical support ... 7 Register your Fortinet product...
Page 4
Contents FortiGate-5000 Series Version 3.0 MR4 Firmware and FortiUSB Guide 01-30004-0383-20070201...
FortiGate-5000 Series Version 3.0 MR4 Firmware and FortiUSB Guide 01-30004-0383-20070201 Description of changes Initial version Minor graphics fixes. Added “Register your Fortinet product” on page 8. Minor change to “Upgrading to a new firmware version” on page Revision history...
Page 6
Refer to nameplate ratings to address this concern. • Make sure all FortiGate components have reliable grounding. Fortinet recommends direct connections to the branch circuit. • If you install a FortiGate component in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient.
Fortinet Knowledge Center Additional Fortinet technical documentation is available from the Fortinet Knowledge Center. The knowledge center contains troubleshooting and how-to articles, FAQs, technical notes, and more. Visit the Fortinet Knowledge Center at http://kc.forticare.com. FortiGate Log Message Reference Knowledge of FortiGate log messages and provides information about the log messages that are generated by FortiGate units.
Product Registration. To register, enter your contact information and the serial numbers of the Fortinet products that you or your organization have purchased. You can register multiple Fortinet products in a single session without re-entering your contact information.
FortiGate firmware FortiGate firmware Fortinet periodically updates the FortiGate firmware to include enhancements and address issues. After you have registered your FortiGate security system (see “Register your Fortinet product” on page support web site http://support.fortinet.com. Only FortiGate administrators with system read and write privileges can change the FortiGate firmware (for example, the admin administrator).
Reverting to a previous firmware version Reverting to a previous firmware version To upgrade the firmware using the CLI To use the following procedure, you must have a TFTP server the FortiGate module can connect to. Make sure the TFTP server is running. Copy the new firmware image file to the root directory of the TFTP server.
Page 11
FortiGate firmware Note: Installing firmware replaces your current antivirus and attack definitions, along with the definitions included with the firmware release you are installing. After you install new firmware, make sure that antivirus and attack definitions are up to date. Note: To use this procedure, you must log in using the admin administrator account, or an administrator account that has system configuration read and write privileges.
Installing firmware images from a system reboot using the CLI Installing firmware images from a system reboot using the CLI Enter the following command to copy the firmware image from the TFTP server to the FortiGate module: execute restore image <name_str> <tftp_ipv4> Where <name_str>...
Page 13
FortiGate firmware Before beginning this procedure, it is recommended that you: • back up the FortiGate system configuration (from the CLI, use the command execute backup config) • back up the IPS custom signatures (from the CLI, use the command execute backup ipsuserdefsig) •...
Page 14
Installing firmware images from a system reboot using the CLI Type I and the Configuration and information menu is displayed: [S]: Set serial port baudrate(will take effect on next boot). [T]: Set image download port. [C]: Set DHCP enable (will take effect on next boot). [D]: Set bootup debug message display (will take effect on next boot).
FortiGate firmware To confirm the new firmware image has been loaded, connect to the FortiGate CLI and enter: get system status To restore the previous configuration After installing firmware from a system reboot, you can use the following procedure to restore your previous configuration from the CLI console connection. Make sure a FortiGate interface is connected to the same network as TFTP server containing the saved configuration file for the FortiGate module.
Page 16
Testing a new firmware image before installing it To test the new firmware image Connect a management computer to the FortiGate CLI using the FortiGate console port. Connect a FortiGate interface to your network. Make sure the TFTP server is running and connected to the same network as the FortiGate interface.
Page 17
FortiGate firmware Enter the number of the FortiGate interface that you connected to the same network as the TFTP server and press Enter. For example, if you have connected interface 6 (port6) to the network, enter 6 and press Enter. Type Q to return to the boot menu.
Page 18
Testing a new firmware image before installing it FortiGate firmware FortiGate-5000 Series Version 3.0 MR4 Firmware and FortiUSB Guide 01-30004-0383-20070201...
If they do, the FortiGate module installs the configuration file and firmware image file directly from the key to the module. Note: The FortiUSB key is purchased separately. The FortiGate module only supports the FortiUSB key available from Fortinet. This section includes the following topics: •...
Using the USB Auto-Install feature Using the USB Auto-Install feature Select USB Disk from the Restore configuration from list. Select the configuration file you want restored in the Filename list. Select Restore. To backup configuration using the CLI Insert the FortiUSB key you want to use to store the configuration file into one of the USB sockets on the FortiGate front panel.
The FortiUSB key Select the following: • On system restart, automatically update FortiGate configuration file if default filename is available on the USB disk. • On system restart, automatically update FortiGate firmware image if default image is available on the USB disk. Enter the configuration and image filenames or use the default configuration filename (fgt_system.conf) and default image name (image.out).
Page 22
Additional CLI commands for the FortiUSB key The FortiUSB key FortiGate-5000 Series Version 3.0 MR4 Firmware and FortiUSB Guide 01-30004-0383-20070201...
Need help?
Do you have a question about the FortiGate FortiGate-5000 and is the answer not in the manual?
Questions and answers