Starting Feb 28, 2025, a FortiGate without an active FortiGate Cloud subscription is required to upgrade to the latest firmware patch within 7 days of a new GA patch release, or FortiGate Cloud services will be paused for that device.
For example, if a FortiGate with no FortiGate Cloud subscription is running v7.4.6, logging to FortiGate Cloud will be paused until one of the following is done:
- the device is upgraded to the latest v7.4 or 7.6 GA release.
- a FortiGate Cloud subscription is applied to the device.
This change ensures enhanced security, reliability, and compliance with the latest features and updates provided by FortiGate Cloud.
To assist administrators in maintaining current firmware patches, FortiGate Cloud will implement notifications and prompts for upgrades on the FortiGate Portal when new patches are available, and the option to schedule an upgrade to latest patch within a 7-day schedule using FortiGate Cloud.
What does this mean:
- For devices without a FortiGate Cloud subscription, apply firmware updates promptly within the 7-day window to maintain uninterrupted access to FortiGate Cloud services. This firmware upgrade does not need to be applied through FortiGate Cloud: the upgrade could also be applied manually, using FortiManager, or using the Automatic Firmware Upgrade Feature.
- For all devices, periodically review FortiGate Cloud subscription status and firmware upgrade settings to ensure devices are up to date with the latest firmware patch versions. The FortiGate Cloud Firmware Profile feature is available for devices with active FortiGate Cloud subscriptions only.
This ensures a robust security posture for all devices, ensuring they operate with the most recent protections and features.
As part of this change, the 'latest-patch' firmware profile will no longer be mandatory nor available for devices without an active FortiGate Cloud subscription. Firmware upgrades for these devices must be applied using any other supported method, including the newly introduced FortiGate Cloud upgrade prompt.
If a device is running firmware from a branch whose End of Support date has passed, the FortiGate must be upgraded to an in-support firmware release to continue accessing FortiGate Cloud services.
In cases where the FortiGate model is in support but does not support later firmware, the latest GA firmware version can be used to maintain access to FortiGate Cloud services. For firmware End of Support dates, reference Product Life Cycle Information in the support portal.
Related article:
Technical Tip: How to check whether a FortiGate has an active (paid) FortiGate Cloud Service Subscri...
|