Skip to main content
Daniyal007
Daniyal007
Explorer
June 5, 2024
Solved

Fortigate update

  • June 5, 2024
  • 3 replies
  • 3247 views

HI there,

i am here to know that which forigate update is more stable and have less issues regarding preformance.

Best answer by ozkanaltas

Hi @Daniyal007 ,

 

It would not be right to say stable or not. But according to Fortinet's maturity labeling, they are not mature. Therefore, the best thing to do would be to review the release notes for both versions and upgrade.

3 replies

Daniyal007
Daniyal007Author
Explorer
June 5, 2024

7.4.3 or 7.4.4

ozkanaltas
ozkanaltas
Valued Contributor III
June 5, 2024

Hi @Daniyal007 ,

 

You can decide with this list. This list is published by Fortinet. They test with all devices and recommend versions for that model.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/227178

 

Also, you can decide with the firmware maturity level. If the maturity level says this version is mature you can choose this version. But every time, you need to read the release notes because some bugs can affect your environment.

 

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/173707/firmware-maturity-levels

 

My opinion about 7.4.3 and 7.4.4, these versions are new. Because of that, a little bit more wait will be beneficial for you before upgrading these versions. Instead of 7.4, you can use 7.2.8.

    Daniyal007
    Daniyal007Author
    Explorer
    June 5, 2024

    my point is that there is vulnerability in 7.4.2 and my device is fortigate 2000E, as we see fortigate 2000E is supported on 7.4.4 so my point is should i update it or not as we are corporate sector and we have to maintain level of security updates and our devices should be updated

    Debbie_FTNT
    Staff & Editor
    Debbie_FTNT
    Staff & Editor
    June 5, 2024

    Hey Daniyal,

    as @ozkanaltas already mentioned, we publish a list of recommended firmware (this does take into account known vulnerabilities), which you can find here:
    https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/227178

    This gets regularly updated when new releases are available.

    In general, I would recommend later firmware versions in a brach over earlier ones (so 7.4.4 over 7.4.2, for example), as later releases typically include more fixes. As to what branch to go with, that depends a lot on your needs and setup; have a look at the release notes for the recommended versions, and then decide which version you prefer to go with.

    If you would like a more professional assessment of your environment, and recommendations tailored to it, please reach out to Fortinet Sales.

     

    Cheers,

    Debbie

    ozkanaltas
    ozkanaltas
    Valued Contributor III
    June 5, 2024

    Hello @Daniyal007 ,

     

    When I review vulnerabilities on 7.4.2, there are two vulnerabilities. Also, these vulnerabilities have workaround solutions. If applicable for you, you can apply them.

     

    https://www.fortiguard.com/psirt?product=FortiOS-6K7K%2CFortiOS&version=7.4.2

     

    If the workaround is not applicable, you can review the release notes for both versions. If bugs are not affected to you you can upgrade to 7.4.3 or 7.4.4.

     

    Daniyal007
    Daniyal007Author
    Explorer
    June 5, 2024

    so as you said both 7.4.3 and 7.4.4 is not stable version yet ?

    ozkanaltas
    ozkanaltasAnswer
    Valued Contributor III
    June 5, 2024

    Hi @Daniyal007 ,

     

    It would not be right to say stable or not. But according to Fortinet's maturity labeling, they are not mature. Therefore, the best thing to do would be to review the release notes for both versions and upgrade.

      Terms & ConditionsAccessibility statement