Downgrade Fireware OS
Use these procedures to downgrade the version of Fireware OS to an earlier version.
It is not necessary to downgrade WatchGuard System Manager when you downgrade Fireware OS, because WatchGuard System Manager can manage a Firebox that uses an earlier version of Fireware OS.
Use a Saved Backup Image to Downgrade
The recommended method to downgrade a Firebox to an older version of Fireware OS is to use the saved backup image that you created before the most recent Fireware OS upgrade on the device. If you have a backup image, there are two procedures you can use to downgrade a Firebox to an earlier version of Fireware:
Restore the full backup image you created for the device before the last Fireware OS upgrade.
For more information, see Restore a Firebox Backup Image.
Use the USB backup file you created before the upgrade as your auto-restore image on a USB drive.
For more information, see Automatically Restore a Backup Image from a USB Drive.
Downgrade Without a Backup Image
If you do not have a backup image for your Firebox, there are two other methods you can use to downgrade Fireware OS to an earlier version:
Use the Quick Setup Wizard in WatchGuard System Manager to downgrade a Firebox started in recovery mode.
This downgrade requires that you create a new basic configuration. It removes the feature key and certificates. After the downgrade, you can use Policy Manager to save a different configuration file to the device.
For more information, see Use the Quick Setup Wizard to Downgrade Fireware OS.
Use the Upgrade feature in Fireware Web UI to install an older version of Fireware OS.
Use this method only to downgrade a device from Fireware OS v11.7 or higher. Because newer features are not all compatible with older OS versions, this downgrade procedure resets the configuration to factory-default settings. It does not change the device passphrases and does not remove the feature keys and certificates.
If you use the Web UI Upgrade feature to downgrade, the device configuration is reset to factory-default settings.
For more information, see Use the Web UI to Downgrade Fireware OS.
Downgrade a FireCluster
To downgrade Fireware OS for a FireCluster, we recommend that you use Policy Manager to restore the backup image. For more information, see Restore a FireCluster Backup Image. To use the Web UI to restore the backup image to a FireCluster, you must have a unique backup image for each device, and you must restore the backup master first. For more information, see Use the Web UI with a FireCluster.
If you do not have a backup image for your FireCluster, you must break the cluster, use one of the other methods to downgrade each Firebox separately, and then reconfigure the FireCluster.