Technical Tip: How to choose a suitable FortiOS version

Common clarification when planning to choose the FortiOS version suitable for each environment:

1. As an initial step, ensure that the firewall is running a supported FortiOS version according to the Product Life Cycle for the FortiGate equipment.
   It is necessary to update/upgrade to a supported FortiOS version to seek help.
2. Each FortiOS version (7.6.x; 7.4.x; 7.2.x; 7.0.x) has different features and is NOT compatible with all models of FortiGate equipment. Verify the update/upgrade eligibility of the selected FortiOS version of each device specified under the version Release Notes -> Supported Models.
3. The first two digits (7.6.x; 7.4.x; 7.2.x; and 7.0.x) of the FortiOS represent the version while the x digit represents the patch of the current version. 
4. It is recommended to maintain the latest patch of the selected version to be compliant with the latest vulnerabilities that are announced in Release Notes -> Resolved Issues -> Common Vulnerabilities and Exposures in accordance with PSIRT Advisories.
5. When upgrading to the newer supported version (for example: from 7.0.x to 7.6.x, from 7.2.x to 7.6.x, from 7.4.x to 7.6.x, from 7.0.x to 7.2.x, from 7.0.x to 7.4.x, or from 7.2.x to 7.4.x):

• Does NOT necessarily denote that is more secure version unless a clear instruction is suggested by the TAC Representative or PSIRT Advisories.
• Does NOT necessarily address a vulnerability concern, unless a clear instruction is suggested by the TAC Representative or PSIRT Advisories.
• A FortiConverter Service license is required whenever the Upgrade Path cannot be respected. (Configuration can get corrupted if the upgrade path is not followed strictly).   
• Upgrades should be planned accordingly.             

6. Having an HA Cluster is always recommended as a suitable business continuity requirement.
7. When ready, strictly follow the instructions of the following article: How to upgrade FortiGate firmware. Make sure to acknowledge the advice provided in the Usage awareness and preparation checklist before the upgrade section.

Involving a TAC Support Representative:

1. The TAC Representative is not equipped to recommend any stable patch or version. That decision falls solely to the client's technical team based on the environment and features in use.
2. The TAC Representative is not advised to be on standby nor perform the updates/upgrades on the team's behalf. This responsibility falls solely to the client's technical team.
3. In cases where a faulty FortiGate firmware upgrade was performed, request immediate support through the phone to the toll-free numbers (see Fortinet Contact Support Information) for extensive troubleshooting available 24/7.

Other Support Resources: 

• FortiCare Professional Services, purchased separately for Design, Plan, Optimize, Evolve, Operate, and Deploy (Contact the Sales Team to benefit).
• FortiCare Advanced Services, purchased separately for RCE analysis, Upgrade assistance, and Software recommendations (Contact the Sales Team to benefit). 
• FortiConverter Service required license used for configuration conversion and migration between FortiGate models or other vendors purchased separately (Contact Sales Team to benefit).
• FortiOS versions for each Model Recommended Release for FortiOS.