How to Loading FortiGate firmware image using TFTP

Today , I’m facing a big problem at my work.

We have 2 Fortinet’s UTM Devices at one of branches.

Those devices are hanged and I cannot connect to one of them and two devices are flashing all LEDs  , after research about this problem I have found the solution 🙂

==============================================

Technical Note : Loading FortiGate firmware image using TFTP

Article

Description

This article describes how to download and install firmware from a local TFTP server via the BIOS, under CLI control.

Caution: Installing firmware from a local TFTP server under console control resets your FortiGate unit to factory default settings. If possible, consider backing up your configuration before starting the TFTP server firmware upgrade.

Components

  • a null modem, or RJ-45 to DB9 console cable (supplied with the FortiGate unit). See also the related article Serial cable pinouts for console access to Fortinet devices
  • an Ethernet RJ45 cable
  • a terminal client, such as a PC running HyperTerminal (Windows)
  • a TFTP server (see below the recommended software)

Recommended TFTP software

  • Windows users

TFTPD32 – Open Source tftp server for windows
[http://tftpd32.jounin.net/tftpd32.html]

3CDaemon V2 – 3com’s TFTP server for windows
[http://support.3com.com/software/utilities_for_windows_32_bit.htm]

  • Linux users

Ubuntu 8.04 LTS, 8.10,  9.04 and 9.10
Fedora Core 9
Centos 5

tftpd-hpa
[http://freshmeat.net/projects/tftpd-hpa/]

  • Mac OS X 10.5/10.6 users

TFTP Server v 3.3.1
[http://ww2.unime.it/flr/tftpserver/]

 

Download the FortiGate firmware and verify MD5 checksum

1) Download the image for your FortiGate from the Fortinet Support Site. At the same website, you can also download the <image name>.md5 file that contains the MD5 checksum for the firmware image you downloaded.

2) Check that the image was downloaded successfully and is not corrupted Compare your generated MD5 sum against the one in the .md5 file.

  • Windows users can download and use the md5sum.exe <filename> (such as : http://www.pctools.net/win32/md5sums/  or    http://www.md5summer.com)
  • Linux users can accomplish this with md5sum <filename>
  • Mac OS X  users can also use md5sum <filename>

Notes

Some console prompts in this procedure include a default value in square brackets, for example, [image.out]. To use this default value, press Enter.

Terminal client communication parameters

8 bits
no parity
1 stop bit
9600 baud (the FortiGate-300 uses 115,000 baud)
Flow Control = None

 

Steps to load the firmware image

1 – Connect the computer to the FortiGate unit using the null modem cable.

2 – Restart the Fortigate.

3 – When the console displays “Press any key to display configuration menu…” press the space bar or any other key.

4 – When a list of choice with letter of Alphabet comes up press G to continue.
5 – Connect the computer running TFTP server to the FortiGate unit. The port is prompted in the console output as below:
Please connect TFTP server to Ethernet port “MGMT”
6 – Type the IP address of the computer running the TFTP server and press Enter.

The console displays:

Enter TFTP server address [192.168.1.168]:

7 – Type the IP address of the Fortigate port that is on the same subnet as the TFTP server and press Enter.

The console displays:

Enter Local Address [192.168.1.188]:

8 – Type the firmware image file name and press Enter.

The console displays:
Enter File Name [image.out]:

The console periodically displays a “#” (pound or hash symbol) to show the download progress.
9 – When the download completes, the console displays a message similar as below, Press D.

Save as Default firmware/Backup firmware/Run image without saving:[D/B/R]?D

The FortiGate unit installs the new firmware image and restarts. The installation may take a few minutes to complete.

Troubleshooting

Once entering the firmware image name and pressing enter, the FortiGate unit MAC address appears and the “#” symbols indicate the progress of the install. If the MAC address does not show up, check the network cable and connector to ensure they are firmly attached to the FortiGate unit.
If MAC address shows up and no “#” signs appear, check which port the network cable is in. Use the table above in step 2 to ensure its in the right port.

Sample Console Output

The following is an example of what the output from the console can look like. Depending on the FortiGate unit, this may vary slightly.

FortiGate-200D (18:47-05.08.2013)
Ver:04000006
Serial number:FG200D4613800892
RAM activation
CPU(00:000206a7 bfebfbff): MP initialization
CPU(02:000206a7 bfebfbff): MP initialization
Total RAM: 2048MB
Enabling cache…Done.
Scanning PCI bus…Done.
Allocating PCI resources…Done.
Enabling PCI resources…Done.
Zeroing IRQ settings…Done.
Verifying PIRQ tables…Done.
Boot up, boot device capacity: 15272MB.
Press any key to display configuration menu…
..
[G]:  Get firmware image from TFTP server.
[F]:  Format boot device.
[B]:  Boot with backup firmware and set as default.
[I]:  Configuration and information.
[Q]:  Quit menu and continue to boot with default firmware.
[H]:  Display this list of options.
 
Enter Selection [G]:
 
Enter G,F,B,I,Q,or H:
 
Please connect TFTP server to Ethernet port “MGMT”.
 
Enter TFTP server address [192.168.1.168]: 10.21.5.59
Enter local address [192.168.1.188]: 10.21.4.115
Enter firmware image file name [image.out]: FGT_200D-v5-build1165-FORTINET.out
MAC:085B0E14BB3E
###################################
Total 37651242 bytes data downloaded.
Verifying the integrity of the firmware image.
 
Total 262144kB unzipped.
Save as Default firmware/Backup firmware/Run image without saving:[D/B/R]?D
Programming the boot device now.
……………………………………………………………………………………………………………………………………………………………………………………..
Reading boot image 1393286 bytes.
Initializing firewall…
System is starting…
Starting system maintenance…
Scanning /dev/sda2… (100%)
 
FG200D4613800892 login:

Related Articles

Troubleshooting Tip : Message ‘invalid compressed format’ or ‘incomplete literal tree’ during TFTP procedure

Last Modified Date: 10-27-2017 Document ID: 10338

(more…)

Continue ReadingHow to Loading FortiGate firmware image using TFTP

ransomware

الفيروس اللي بدور عليه
بيبقى عايز الضحيه تبعت ميل على all your data has been locked us you want to return write email lopam@protonmail.com
نوع من
BTCWare ransomware
و ده نوع احدث من اللي قبله Crypto locker (more…)

Continue Readingransomware

Top 6 Features in Windows Server 2019

windows-server-2019-image

Top 6 Features in Windows Server 2019

A preview of Windows Server 2019 adds features for hyperconvergence, management, security, containers and more.

***Important Note : This article was quoted by  and publish by Network World 

Enterprise-grade hyperconverged infrastructure (HCI)

With the release of Windows Server 2019, Microsoft rolls up three years of updates for its HCI platform. That’s because the gradual upgrade schedule Microsoft now uses includes what it calls Semi-Annual Channel releases – incremental upgrades as they become available. Then every couple of years it creates a major release called the Long-Term Servicing Channel (LTSC) version that includes the upgrades from the preceding Semi-Annual Channel releases.

The LTSC Windows Server 2019 is due out this fall, and is now available to members of Microsoft’s Insider program.

While the fundamental components of HCI (compute, storage and networking) have been improved with the Semi-Annual Channel releases, for organizations building datacenters and high-scale software defined platforms, Windows Server 2019 is a significant release for the software-defined datacenter.

With the latest release, HCI is provided on top of a set of components that are bundled in with the server license. This means a backbone of servers running HyperV to enable dynamic increase or decrease of capacity for workloads without downtime. (For more on Microsoft HCI go here.)

GUI for Windows Server 2019

A surprise for many enterprises that started to roll-out the Semi-Annual Channel versins of Windows Server 2016 was the lack of a GUI for those releases.  The Semi-Annual Channel releases only supported ServerCore (and Nano) GUI-less configurations.  With the LTSC release of Windows Server 2019, IT Pros will once again get their desktop GUI of Windows Server in addition to the GUI-less ServerCore and Nano releases.

Project Honolulu

With the release of Windows Server 2019, Microsoft will formally release their Project Honolulu server management tool. Project Honolulu is a central console that allows IT pros to easily manage GUI and GUI-less Windows 2019, 2016 and 2012R2 servers in their environments.

Early adopters have found the simplicity of management that Project Honolulu provides by rolling up common tasks such as performance monitoring (PerfMon), server configuration and settings tasks, and the management of Windows Services that run on server systems.  This makes these tasks easier for administrators to manage on a mix of servers in their environment.

Improvements in security

Microsoft has continued to include built-in security functionality to help organizations address an “expect breach” model of security management.  Rather than assuming firewalls along the perimeter of an enterprise will prevent any and all security compromises, Windows Server 2019 assumes servers and applications within the core of a datacenter have already been compromised.

Windows Server 2019 includes Windows Defender Advanced Threat Protection (ATP) that assess common vectors for security breaches, and automatically blocks and alerts about potential malicious attacks.  Users of Windows 10 have received many of the Windows Defender ATP features over the past few months. Including  Windows Defender ATP on Windows Server 2019 lets them take advantage of data storage, network transport and security-integrity components to prevent compromises on Windows Server 2019 systems.

Smaller, more efficient containers

Organizations are rapidly minimizing the footprint and overhead of their IT operations and eliminating more bloated servers with thinner and more efficient containers. Windows Insiders have benefited by achieving higher density of compute to improve overall application operations with no additional expenditure in hardware server systems or expansion of hardware capacity.

Windows Server 2019 has a smaller, leaner ServerCore image that cuts virtual machine overhead by 50-80 percent.  When an organization can get the same (or more) functionality in a significantly smaller image, the organization is able to lower costs and improve efficiencies in IT investments.

Windows subsystem on Linux

A decade ago, one would rarely say Microsoft and Linux in the same breath as complimentary platform services, but that has changed. Windows Server 2016 has open support for Linux instances as virtual machines, and the new Windows Server 2019 release makes huge headway by including an entire subsystem optimized for the operation of Linux systems on Windows Server.

The Windows Subsystem for Linux extends basic virtual machine operation of Linux systems on Windows Server, and provides a deeper layer of integration for networking, native filesystem storage and security controls. It can enable encrypted Linux virtual instances. That’s exactly how Microsoft provided Shielded VMs for Windows in Windows Server 2016, but now native Shielded VMs for Linux on Windows Server 2019.

Enterprises have found the optimization of containers along with the ability to natively support Linux on Windows Server hosts can decrease costs by eliminating the need for two or three infrastructure platforms, and instead running them on Windows Server 2019.

Because most of the “new features” in Windows Server 2019 have been included in updates over the past couple years, these features are not earth-shattering surprises.  However, it also means that the features in Windows Server 2019 that were part of Windows Server 2016 Semi-Annual Channel releases have been tried, tested, updated and proven already, so that when Windows Server 2019 ships, organizations don’t have to wait six to 12 months for a service pack of bug fixes.

This is a significant change that is helping organizations plan their adoption of Windows Server 2019 sooner than orgs may have adopted a major release platform in the past, and with significant improvements for enterprise datacenters in gaining the benefits of Windows Server 2019 to meet security, scalability, and optimized data center requirements so badly needed in today’s fast-paced environments.

 

(more…)

Continue ReadingTop 6 Features in Windows Server 2019