Fortinet FortiGate 100 Installation & Configuration Manual page 74

Revert to a previous firmware version
10
74
Note: Installing firmware replaces your current antivirus and attack definitions with the
definitions included with the firmware release that you are installing. When you have installed
new firmware, use the procedure
page 95 to make sure that antivirus and attack definitions are up-to-date. You can also use the
CLI command
execute updatecenter updatenow
definitions.
To use the following procedure you must have a TFTP server that you can connect to
from the FortiGate unit.
1 Make sure that the TFTP server is running.
2 Copy the new firmware image file to the root directory of the TFTP server.
3 Login to the FortiGate CLI as the admin administrative user.
4 Make sure the FortiGate unit can connect to the TFTP server.
You can use the following command to ping the computer running the TFTP server.
For example, if the TFTP server's IP address is 192.168.1.168:
execute ping 192.168.1.168
5 Enter the following command to copy the firmware image from the TFTP server to the
FortiGate unit:
execute restore image <name_str> <tftp_ip>
Where <name_str> is the name of the firmware image file on the TFTP server and
<tftp_ip> is the IP address of the TFTP server. For example, if the firmware image
file name is FGT_300-v250-build045-FORTINET.out and the IP address of the
TFTP server is 192.168.1.168, enter:
execute restore image FGT_300-v250-build045-FORTINET.out
192.168.1.168
The FortiGate unit uploads the firmware image file. Once the file has been uploaded a
message similar to the following is displayed:
Get image from tftp server OK.
This operation will downgarde the current firmware version!
Do you want to continue? (y/n)
6 Type Y
7 The FortiGate unit reverts to the old firmware version, resets the configuration to
factory defaults, and restarts. This process takes a few minutes.
8 Reconnect to the CLI.
For information about logging into the web-based manager when the FortiGate unit is
set to factory defaults, see
page 31.
9 To confirm that the new firmware image has been loaded, enter:
get system status
Restore your previous configuration. Use the following command:
execute restore config
11 Use the procedure
update antivirus and attack definitions, or from the CLI, enter:
execute updatecenter updatenow
"Manually updating antivirus and attack definitions" on
"Connecting to the command line interface (CLI)" on
"Manually updating antivirus and attack definitions" on page 95
System status
to update the antivirus and attack
Fortinet Inc.
to