FortiGate Firmware Using the CLI
FortiGate-30B FortiOS 3.0 MR6 Install Guide
01-30006-0459-20080505 43
5Enter the following command to copy the firmware image from the TFTP server to
the FortiGate unit:
execute restore image <name_str> <tftp_ip4>
Where <name_str> is the name of the firmware image file and <tftp_ip4> is
the IP address of the TFTP server. For example, if the firmware image file name is
image.out and the IP address of the TFTP server is 192.168.1.168, enter:
execute restore image image.out 192.168.1.168
The FortiGate unit responds with the message:
This operation will replace the current firmware version!
Do you want to continue? (y/n)
6Type y.
The FortiGate unit uploads the firmware image file, upgrades to the new firmware
version, and restarts. This process takes a few minutes.
7Reconnect to the CLI.
8Update antivirus and attack definitions, by entering:
execute update-now
Reverting to a previous version
This procedure reverts the FortiGate unit to its factory default configuration and
deletes IPS custom signatures, web content lists, email filtering lists, and changes
to replacement messages.
Before beginning this procedure, it is recommended that you:
• back up the FortiGate unit system configuration using the command
execute backup config
• back up the IPS custom signatures using the command execute
backup ipsuserdefsig
• back up web content and email filtering lists
If you are reverting to a previous FortiOS version (for example, reverting from
FortiOS v3.0 to FortiOS v2.80), you might not be able to restore the previous
configuration from the backup configuration file.
To use the following procedure, you must have a TFTP server the FortiGate unit
can connect to.
To revert to a previous firmware version using the CLI
1Make sure the TFTP server is running
2Copy the firmware image file to the root directory of the TFTP server.
3Log into the FortiGate CLI.
Note: Installing firmware replaces your current antivirus and attack definitions, along with
the definitions included with the firmware release you are installing. After you install new
firmware, make sure that antivirus and attack definitions are up to date. You can also use
the CLI command execute update-now to update the antivirus and attack definitions.
Note: To use this procedure, you must log in using the admin administrator account, or an
administrator account that has system configuration read and write privileges.