FortiProxy and FortiManager Compatibility Matrix

[sleepingzzz]

Hi. Can I know if upgrade FortiManager to 7.2.8 and FortiProxy to 7.2.11, will FortiManager be able to support FortiProxy? 

From what I read in FortiManager 7.2.8 release notes, 

FortiManager 7.2.8 supports configuration management for the following versions of FortiProxy:

7.2.9

7.2.7

7.2.6

7.2.3

7.2.2

7.0.12 to 7.0.17

7.0.7 to 7.0.10

FortiManager 7.2.8 supports logs from the following versions of FortiProxy:

7.2.0 to 7.2.9

7.0.0 to 7.0.17

2.0.0 to 2.0.5

1.2.0 to 1.2.13

1.1.0 to 1.1.6

1.0.0 to 1.0.7

What does supports configuration management and logs means? If upgrade FortiProxy to 7.2.11 will it have any compatibility issue with FortiManager?

Thanks!

[dingjerry_FTNT]

Hi @sleepingzzz ,

1) If you read it carefully, there is info for what Configuration Management means:

https://docs.fortinet.com/document/fortimanager/7.2.8/release-notes/555004/feature-support

2) Supporting logs:

We can enable the FAZ function in FMG with which you can receive logs. 

3) Neither mentioned FortiProxy 7.2.11. So definitely you will have compatibility issue if you add FortiProxy 7.2.11 into FMG.  I don't think that you can import the configuration from FPX 7.2.11.

[sleepingzzz]

Hi @dingjerry_FTNT,

Thanks for the reply. Does that mean that in order for FMG to be able to support FPX, I need to upgrade both of them to 7.4.x train?

[dingjerry_FTNT]

Hi @sleepingzzz ,

You still need to check the FMG Release Notes doc for the compatibility matrix.

For example, the latest FMG 7.4 patch is 7.4.6 and it supports FortiProxy 7.4.0 - 7.4.5. 

However, the latest FortiProxy 7.4 patch is 7.4.8. 

If you upgrade FortiProxy to 7.4.6 - 7.4.8, no FMG firmware version will support it as of now.

[sleepingzzz]

Hi @dingjerry_FTNT,

So if I want to upgrade from 7.2.x to 7.4.x, is the following sequence correct?

1. Upgrade FMG ADOM to 7.4

2. Upgrade FMG to 7.4.x

3. Upgrade FPX to 7.4.x 

[Nur]

Hi,

Upgrade sequence will be

1. FMG

2. FPX

3. ADOM

ADOM need to be last to upgrade.

[dingjerry_FTNT]

Hi @sleepingzzz ,

Your FMG version will be the highest version for the ADOMs.

So if your FMG version is 7.2, your ADOM version will be up to 7.2,  can't be upgraded to 7.4.

So you need to:

1) Upgrade FMG to 7.4.x;

2) Upgrade FPX to 7.4.y if it is in one FMG ADOM already and make sure that the FPX version 7.4.y is supported by the FMG version 7.4.x.

3) Upgrade the ADOM to 7.4.

NOTE:

If your FMG upgrades to 7.4, you can still keep the ADOM with the 7.2 version and still keep FPX with 7.2.y version.

[sleepingzzz]

Thanks all for the reply!

[sleepingzzz]

Hi @dingjerry_FTNT ,

Sorry one more question. I have FMG with managed FGT and FPX. Can I check does the upgrade of FGT and FPX need to be done through FMG? Or I can upgrade from individual FGT and FPX?

[dingjerry_FTNT]

Hi @sleepingzzz ,

It's better to use FMG for the upgrade.