FortiOS 6.4.8 good to upgrade?

[Anand_Narayana]

I am planning to upgrade from my existing FortiOS v.6.4.3 to v.6.4.8. This is due to recent sslvpn vulnerability (CVE-2021-26109) that is affected up to FortiOS v.6.4.7. Has anyone faced an issue with v.6.4.8 upgrade?

[Markus_M]

Hi Anand,

usually a good spot are the known issues within the release notes of that release.

https://docs.fortinet.com/document/fortigate/6.4.8/fortios-release-notes/236526/known-issues
As bad as these sound, see to compare them with the known issues from the current release you have:

https://docs.fortinet.com/document/fortigate/6.4.3/fortios-release-notes/236526/known-issues

Some that are already in your current version known will probably not affect you with your environment, so they can likely be ignored. You know your environment best so studying this will help you best to understand what is actually concerning your environment.

Example:

Known issue:

746891

Auto-update script sent from FortiOS GUI has a policy ID of zero, which causes FortiManager to be out of synchronization.

You don't have a FortiManager? This issue doesn't concern you.

You should always have a backup prior changes anyway.

Best regards,

Markus