{"id":20,"date":"2024-06-26T09:29:07","date_gmt":"2024-06-26T07:29:07","guid":{"rendered":"https:\/\/pprzybyla.com\/blog\/?p=20"},"modified":"2024-06-26T16:44:37","modified_gmt":"2024-06-26T14:44:37","slug":"tips-on-upgrading-fortigate-in-ha-cluster","status":"publish","type":"post","link":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/","title":{"rendered":"Tips on Upgrading Fortigate in HA Cluster"},"content":{"rendered":"\r\n<h2 id=\"_tips_on_ha_upgrades\">Tips on HA upgrades<\/h2>\r\n<div class=\"sectionbody\">\r\n<div class=\"ulist\">\r\n<ul>\r\n<li>\r\n<p>Follow the Upgrade Path. <a href=\"https:\/\/docs.fortinet.com\/upgrade-tool\/fortigate\">https:\/\/docs.fortinet.com\/upgrade-tool\/fortigate<\/a><\/p>\r\n<\/li>\r\n<li>\r\n<p>Review Release Notes, check Known issues to see if there may be a problem with your configuration.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Back up full configuration with local\u00a0super_admin level account.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Review the crash logs for any firewall issues and generally look around to make sure Fortigate is working well before upgrading (e.g. routing protocols status, VPN tunnels, CPU load)<\/p>\r\n<\/li>\r\n<li>\r\n<p>Physical\/console access for the device. Someone on site who can issue a remote connection (e.g. via teamviewer or teams)<\/p>\r\n<\/li>\r\n<li>\r\n<p>Have plan and time for rollback.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Have the necessary firmware at hand. Check if tftp\/USB pendrive works fine.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Back up the configuration &#8211; both plain text and encrypted (only the encrypted configuration includes certificates).<\/p>\r\n<\/li>\r\n<li>\r\n<p>After the update, check the configuration and consistency of operation. Someone on site should test the network (wifi and lan), check accesses to individual resources that should work from given vlans<\/p>\r\n<\/li>\r\n<li>\r\n<p>Be patient &#8211; upgrade can take up to 30 minutes.\u00a0 To reduce the nerves during the upgrade, connect with a console cable to the device and opserwatch the status in the console.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Don&#8217;t worry about the HA failover time. Failover mainly causes 4-5 seconds of downtime if everything goes smoothly. The downtime experienced by end-customers can be longer depending on the topology &#8211; for example, if there are BGP peer connections, they will be reset and return to established state as soon as BGP timers are configured. So it can take 30 seconds or longer to bring BGP routes back online.<\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/div>\r\n<\/div>\r\n","protected":false},"excerpt":{"rendered":"<p>Tips on HA upgrades Follow the Upgrade Path. https:\/\/docs.fortinet.com\/upgrade-tool\/fortigate Review Release Notes, check Known issues to see if there may be a problem with your configuration. Back up full configuration with local\u00a0super_admin level account. Review the crash logs for any firewall issues and generally look around to make sure Fortigate is working well before upgrading\u2026 <span class=\"read-more\"><a href=\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":31,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-20","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fortigate"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Tips on Upgrading Fortigate in HA Cluster - Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tips on Upgrading Fortigate in HA Cluster - Blog\" \/>\n<meta property=\"og:description\" content=\"Tips on HA upgrades Follow the Upgrade Path. https:\/\/docs.fortinet.com\/upgrade-tool\/fortigate Review Release Notes, check Known issues to see if there may be a problem with your configuration. Back up full configuration with local\u00a0super_admin level account. Review the crash logs for any firewall issues and generally look around to make sure Fortigate is working well before upgrading\u2026 Read More &raquo;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-26T07:29:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-26T14:44:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png\" \/>\n\t<meta property=\"og:image:width\" content=\"530\" \/>\n\t<meta property=\"og:image:height\" content=\"507\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\"},\"headline\":\"Tips on Upgrading Fortigate in HA Cluster\",\"datePublished\":\"2024-06-26T07:29:07+00:00\",\"dateModified\":\"2024-06-26T14:44:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\"},\"wordCount\":264,\"commentCount\":0,\"publisher\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\"},\"image\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png\",\"articleSection\":[\"Fortigate\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\",\"url\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\",\"name\":\"Tips on Upgrading Fortigate in HA Cluster - Blog\",\"isPartOf\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png\",\"datePublished\":\"2024-06-26T07:29:07+00:00\",\"dateModified\":\"2024-06-26T14:44:37+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage\",\"url\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png\",\"contentUrl\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png\",\"width\":530,\"height\":507},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"http:\/\/pprzybyla.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tips on Upgrading Fortigate in HA Cluster\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/pprzybyla.com\/blog\/#website\",\"url\":\"http:\/\/pprzybyla.com\/blog\/\",\"name\":\"Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/pprzybyla.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg\",\"contentUrl\":\"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg\",\"width\":800,\"height\":800,\"caption\":\"admin\"},\"logo\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/\"},\"sameAs\":[\"http:\/\/pprzybyla.com\/blog\"],\"url\":\"https:\/\/pprzybyla.com\/blog\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Tips on Upgrading Fortigate in HA Cluster - Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/","og_locale":"en_US","og_type":"article","og_title":"Tips on Upgrading Fortigate in HA Cluster - Blog","og_description":"Tips on HA upgrades Follow the Upgrade Path. https:\/\/docs.fortinet.com\/upgrade-tool\/fortigate Review Release Notes, check Known issues to see if there may be a problem with your configuration. Back up full configuration with local\u00a0super_admin level account. Review the crash logs for any firewall issues and generally look around to make sure Fortigate is working well before upgrading\u2026 Read More &raquo;","og_url":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/","og_site_name":"Blog","article_published_time":"2024-06-26T07:29:07+00:00","article_modified_time":"2024-06-26T14:44:37+00:00","og_image":[{"width":530,"height":507,"url":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#article","isPartOf":{"@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/"},"author":{"name":"admin","@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558"},"headline":"Tips on Upgrading Fortigate in HA Cluster","datePublished":"2024-06-26T07:29:07+00:00","dateModified":"2024-06-26T14:44:37+00:00","mainEntityOfPage":{"@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/"},"wordCount":264,"commentCount":0,"publisher":{"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558"},"image":{"@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage"},"thumbnailUrl":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png","articleSection":["Fortigate"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/","url":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/","name":"Tips on Upgrading Fortigate in HA Cluster - Blog","isPartOf":{"@id":"http:\/\/pprzybyla.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage"},"image":{"@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage"},"thumbnailUrl":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png","datePublished":"2024-06-26T07:29:07+00:00","dateModified":"2024-06-26T14:44:37+00:00","breadcrumb":{"@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#primaryimage","url":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png","contentUrl":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2024\/06\/Zrzut-ekranu-2024-05-02-082950.png","width":530,"height":507},{"@type":"BreadcrumbList","@id":"https:\/\/pprzybyla.com\/blog\/tips-on-upgrading-fortigate-in-ha-cluster\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"http:\/\/pprzybyla.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Tips on Upgrading Fortigate in HA Cluster"}]},{"@type":"WebSite","@id":"http:\/\/pprzybyla.com\/blog\/#website","url":"http:\/\/pprzybyla.com\/blog\/","name":"Blog","description":"","publisher":{"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/pprzybyla.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/","url":"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg","contentUrl":"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg","width":800,"height":800,"caption":"admin"},"logo":{"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/"},"sameAs":["http:\/\/pprzybyla.com\/blog"],"url":"https:\/\/pprzybyla.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts\/20","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/comments?post=20"}],"version-history":[{"count":4,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts\/20\/revisions"}],"predecessor-version":[{"id":32,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts\/20\/revisions\/32"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/media\/31"}],"wp:attachment":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/media?parent=20"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/categories?post=20"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/tags?post=20"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}