For most environments, staying within the same major version (e.g., 7.0.x → 7.0.y) is low-risk. Major version upgrades (7.0 → 7.2) require a full test cycle.

System > Configuration > Backup → Save a .conf file locally. Also export CLI config: execute backup config tftp <filename> <tftp-server>

Not every FortiGate model supports the latest FortiOS version. Check the Fortinet Product Lifecycle page. For example, a FortiGate 60E cannot run FortiOS 7.4 or higher.

You should always use the Fortinet official upgrade path tool to see the specific intermediate versions you must install.

get system status

Once the file is on the device:

(When unit won’t boot) Use console cable + TFTP server to flash older image, then restore config backup.

Manually export a configuration file. This is the only way to recover if the upgrade fails or requires a rollback. Health Check:

If your FortiGate does not have internet access, or if you are skipping several versions and need a specific firmware file, use this method.