Fortinet FortiGate FortiGate-1000, Руководство администратора

Страница: 36 / 392

36
01-28006-0009-20041105 Fortinet Inc.
Changing the FortiGate firmware System status
6 Select OK.
The FortiGate unit uploads the firmware image file, reverts to the old firmware version,
resets the configuration, restarts, and displays the FortiGate login. This process takes
a few minutes.
7 Log into the web-based manager.
8 Go to System > Status and check the Firmware Version to confirm that the firmware
is successfully installed.
9 Restore your configuration.
For information about restoring your configuration, see
“Backup and restore” on
page 117 .
10 Update antivirus and attack definitions.
For information about antivirus and attack definitions, see
“To update antivirus and
attack definitions” on page 123 .
Reverting to a previous firmware version using the CLI
This procedure reverts the FortiGate unit to its factory default configuration and
deletes IPS custom signatures, web content lists, email filtering lists, and changes to
replacement messages.
Before beginning this procedure you can:
• Back up the FortiGate unit system configuration using the command
execute
backup config
.
• Back up the IPS custom signatures using the command
execute backup
ipsuserdefsig
• Back up web content and email filtering lists.
For information, see “Backing up and Restoring” on page 118 .
If you are reverting to a previous FortiOS version (for example, reverting from FortiOS
v2.80 to FortiOS v2.50), you might not be able to restore your previous configuration
from the backup configuration file.
To use the following procedure you must have a TFTP server that the FortiGate unit
can connect to.
To revert to a previous firmware version using the CLI
1 Make sure that the TFTP server is running.
2 Copy the firmware image file to the root directory of the TFTP server.
3 Log into the FortiGate CLI.
Note: Installing firmware replaces the current antivirus and attack definitions with the definitions
included with the firmware release that you are installing. After you install new firmware, use the
procedure
“To update antivirus and attack definitions” on page 123 to make sure that antivirus
and attack definitions are up to date. You can also use the CLI command execute
update_now to update the antivirus and attack definitions.
Note: To use this procedure you must login using the admin administrator account, or an
administrator account that has system configuration read and write privileges.