Autoupgrade - "latest patch" - Fortigates with no active forticloudsubscription - clearify

[menatwork]

Hi,

although I had a talk to tech support, It has developed, that I still have questions to this, while reading 

How to control Automatic Upgrades/Firmwar... - Fortinet Community

As it says that all FGTs with the free tier forticloudsubscription will get automatic firmwareupdates and you cannot turn this off. You only can set the time, when the firmware will be installed.

So in my words: All my FGTs running 7.0.x to 7.2.x with no active but free-tier forticloud-subscription will begin to get firmwareupdates to the latest patchrelease of the installed FortiOS. Atm this would mean I will get the 7.0.15 at my 7.0.x FGTs for example, starting with Nov 2024. (if not installed).

They will not do a major  to 7.2.x or 7.4.x (coming from 7.0.x) but will autoinstall 7.0.15, or the latest Patchrelease of the 7.2.x or 7.4.x.

I have no option to opt out of this (with the free tier forticloud).

Thanks!

[Rajan_kohli]

Hi,

Patch releases are typically designed to address known vulnerabilities, enhance performance, and improve the overall security of the network. Staying current with these patch updates helps mitigate the risk of encountering issues that could be more disruptive than the upgrade itself. For devices covered under the subscription, we offer a maximum 14-day delay from the firmware release date which will allow customers the time to review the release notes and evaluate the update’s suitability for deployment.

[menatwork]

Hi!

I completely can understand your approach, cause there are a lot of FGTs out there which are not patched / upgraded etc.

We are talking about the forticloud subscription, am I right and NOT about the Forticare/UTM Subscription?

So free-tier forticloud users get updates/upgrades starting at Nov 24, without the option to "opt out".

And non-free-tier forticloud users have more options, correct?

Thanks

BR