We currently have our live 60D running 5.2.3, using: IPS (including custom signatures), flow based AV, ssl deep inspection, basic application control and SSL & IPSEC VPN tunnels for remote connectivity. Our network is a fairly simple one, with web and ftp servers held in a dmz and internal LAN clients not switched through the FGT internal interface. We don't have a FortiCloud subscription and just use the free service.
We have an identically configured 60D as a test / backup box and use a small representative test network (virtualised on an Ubuntu host) to simulate required functionality (obviously not to the same scale) - I upgraded this box to 5.2.7 and performed various functionality tests that showed no noticeable issues.
After reviewing fixed and known issues for all releases between 5.2.3 and 5.2.7 I can't see any obvious reason not to upgrade (using the published path 5.2.3 -> 5.2.5 -> 5.2.7) however I'm wary as issues only really emerge based on adoption. To add to this I'll be out of the country (and offline) for all of June, meaning that I'd want to avoid making any changes in late May as I'm the Fortigate guy at work.
So - how's the view from 5.2.7? Does anyone have it in production right now? Any issues / concerns showing up?
