FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
npaiva
Staff & Editor
Staff & Editor
Article Id 328294
Description

 

This article describes awareness for Low-End FortiGate Appliances administrators before performing firmware upgrades to FortiOS v7.4.4 and v7.6.0.

 

Scope

 

For Low-End units, with RAM <=2Gb from FortiOS v7.4.4 onward, Proxy-related features will no longer be supported. This is documented in the Upgrade Information section of FortiOS v7.4.4 Release Notes:

2 GB RAM FortiGate models no longer support FortiOS proxy-related features

 

From FortiOS v7.6.0, Low-End units will also not support SSL VPN tunnel or web mode, as described in the Special notices section of FortiOS v7.6.0 release notes:

SSL VPN removed from 2GB RAM models for tunnel and web mode

 

FortiOS v7.6.0 also no longer supports Proxy-related features for units with <2Gb RAM:

2 GB RAM FortiGate models no longer support FortiOS proxy-related features

 

Solution

 

If the administrator requires these features, the recommendation is to continue using FortiOS v7.2.x. It is possible to check the Firmware’s lifecycle on the following page, and select the Software tab:

Product Life Cycle

 

It is also possible to upgrade the FortiCare contract to Elite, and benefit from Extended End-of-Engineering-Support (E-EoES) for Long Term Supported firmware (LTS) releases, for 18 months, as described in the following document:

FortiCare Services

 

Note: On v7.6.3, further optimizations were done, which remove or rework certain features on devices with 2GB or less of memory.

For further details, consult Optimizations for physical FortiGate devices with 2 GB RAM 7.6.3.