Explorer

Solved

Fortigate update

7 replies
3287 views

HI there,

i am here to know that which forigate update is more stable and have less issues regarding preformance.

FortiGate

ozkanaltasAnswer

Valued Contributor III

Hi @Daniyal007 ,

It would not be right to say stable or not. But according to Fortinet's maturity labeling, they are not mature. Therefore, the best thing to do would be to review the release notes for both versions and upgrade.

Daniyal007Author

Explorer

7.4.3 or 7.4.4

ozkanaltas

Valued Contributor III

Hi @Daniyal007 ,

You can decide with this list. This list is published by Fortinet. They test with all devices and recommend versions for that model.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/227178

Also, you can decide with the firmware maturity level. If the maturity level says this version is mature you can choose this version. But every time, you need to read the release notes because some bugs can affect your environment.

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/173707/firmware-maturity-levels

My opinion about 7.4.3 and 7.4.4, these versions are new. Because of that, a little bit more wait will be beneficial for you before upgrading these versions. Instead of 7.4, you can use 7.2.8.

Daniyal007Author

Explorer

my point is that there is vulnerability in 7.4.2 and my device is fortigate 2000E, as we see fortigate 2000E is supported on 7.4.4 so my point is should i update it or not as we are corporate sector and we have to maintain level of security updates and our devices should be updated

Debbie_FTNT

Staff & Editor

Hey Daniyal,

as @ozkanaltas already mentioned, we publish a list of recommended firmware (this does take into account known vulnerabilities), which you can find here:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/227178

This gets regularly updated when new releases are available.

In general, I would recommend later firmware versions in a brach over earlier ones (so 7.4.4 over 7.4.2, for example), as later releases typically include more fixes. As to what branch to go with, that depends a lot on your needs and setup; have a look at the release notes for the recommended versions, and then decide which version you prefer to go with.

If you would like a more professional assessment of your environment, and recommendations tailored to it, please reach out to Fortinet Sales.

Cheers,

Debbie

ozkanaltas

Valued Contributor III

Hello @Daniyal007 ,

When I review vulnerabilities on 7.4.2, there are two vulnerabilities. Also, these vulnerabilities have workaround solutions. If applicable for you, you can apply them.

https://www.fortiguard.com/psirt?product=FortiOS-6K7K%2CFortiOS&version=7.4.2

If the workaround is not applicable, you can review the release notes for both versions. If bugs are not affected to you you can upgrade to 7.4.3 or 7.4.4.

Daniyal007Author

Explorer

so as you said both 7.4.3 and 7.4.4 is not stable version yet ?

ozkanaltasAnswer

Valued Contributor III

Hi @Daniyal007 ,

It would not be right to say stable or not. But according to Fortinet's maturity labeling, they are not mature. Therefore, the best thing to do would be to review the release notes for both versions and upgrade.

Sign up

Login with SSO

Login to the community

Login with SSO