Fortigate - FortiClient - Client OS, How to check compatibility?

[damianhlozano]

Hello team!!

I need to know compatibility between FortiOS (Fortigate) and FortiClient, and between FortiClient and Client OS versions.

For example, I need to know for an specific OS version (Windows, Linux, and Mac OS), which is the last FortiClient that supports this OS.  And also, I need to know, for this FortiClient Version, which is the last FortiOS supporting this.

I found some old compatibility matrix, but this didnt help me.

Which is the correct way to find out this?

Do I need to read the release notes?  FortiOS or FortiClient release notes?

In which section do I find the compatibility?

Thanks in advance.

Regards,

Damián

[funkylicious · Accepted solution]

for OS supported by FortiClient ( free/VPN-only ) you would need to read the release notes for it, e.g. https://docs.fortinet.com/document/forticlient/7.2.12/windows-release-notes/549781/product-integrati...

if managed by EMS - https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/afec3249-ed3f-11ea-96b9-005056... 

[damianhlozano]

Hello Funkylicious!

Thanks for your answer!

Ok, I find this:

* In your link, select the major version 

* I go to "FortiClient Release Notes" and select the specific version

* Clic on the OS 

* Clic on "Product integration and support"

* There I could find FortiOS Version supported and OS Versions supported for this FortiClient version

This is useful to me!

Now, I wonder if new FortiOS versions are being added in all old the release notes.

For example, for FortiClient 7.4.2, FortiOS 7.6.0 does not appear as compatible for SSL/IPsec VPNs, but I am almost sure that FortiClient 7.4.2 can connect to ForiOS 7.6.4 VPNs.

Is there an explanation?

Regards,

Damián

[funkylicious]

starting w/ FortiOS 7.6.3 SSLVPN is removed/obsolete and cannot be used, https://docs.fortinet.com/document/fortigate/7.6.4/fortios-release-notes/173430/ssl-vpn-tunnel-mode-... 

compatibility between FortiClient and FortiOS for IPsec/SSLVPN should not be a real issue

what you should watch for is compatibility between FCT and OS and know issues in FCT ( FortiClient ) and resolved ones.

[damianhlozano]

---

@funkylicious wrote:

starting w/ FortiOS 7.6.3 SSLVPN is removed/obsolete and cannot be used, https://docs.fortinet.com/document/fortigate/7.6.4/fortios-release-notes/173430/ssl-vpn-tunnel-mode-... 

compatibility between FortiClient and FortiOS for IPsec/SSLVPN should not be a real issue

what you should watch for is compatibility between FCT and OS and know issues in FCT ( FortiClient ) and resolved ones.

---

I know this.

Do you think that FortiClient 7.2.12 will connect to FortiOS 7.6.4 IPsec IKEv2 VPN?

Regards,

Damián

[funkylicious]

i would not see a problem with it, unless you are using/configuring a feature like IPsec over TCP which requires FCT 7.4.1+, usually if a configuration requires a specific FCT version its mentioned in the config guide for it

[yderek]

In general speaking unless particular issue or problem be found in FortiClient version, otherwise, no need to worry too much between FortiClient and FortiGate version , however after 7.4.4 FortiClient has no more VPN client avaiable and since the SSLVPN has removed from FortiGate as @funkylicious  mentioned 

If you are looking for dialup IPsec with FortiGate 7.6.x you might consider of 7.2.12 FortiClient version

For Client OS unless there is ARM based or MAC, in general windows FortiClient any version should working fine 

[damianhlozano]

Thank you both!!!

I dont understand this:

after 7.4.4 FortiClient has no more VPN client avaiable

I allways used ipsec, so I dont care about SSL support, but I think even FC 7.4.4 is a VPN Client, and a kind of agent to connect to EMS in the ZTNA version

Regards,

Damián

[funkylicious]

have a look at @Debbie_FTNT 's article that was just posted, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Overview-of-compatible-IKE-versions-user/t... 

[damianhlozano]

Thank you!!

This is very useful to me.

I will need FC 7.4.2 or later to support IKEv2 and AD Authentication

Thanks a lot!

Regards,

Damián