Fortigate update

[Daniyal007]

HI there,

i am here to know that which forigate update is more stable and have less issues regarding preformance.

[ozkanaltas · Accepted solution]

Hi @Daniyal007 ,

You can decide with this list. This list is published by Fortinet. They test with all devices and recommend versions for that model.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/22717...

Also, you can decide with the firmware maturity level. If the maturity level says this version is mature you can choose this version. But every time, you need to read the release notes because some bugs can affect your environment.

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/173707/firmware-maturity-lev...

My opinion about 7.4.3 and 7.4.4, these versions are new. Because of that, a little bit more wait will be beneficial for you before upgrading these versions. Instead of 7.4, you can use 7.2.8.

[Daniyal007]

7.4.3 or 7.4.4

[ozkanaltas · Accepted solution]

Hi @Daniyal007 ,

You can decide with this list. This list is published by Fortinet. They test with all devices and recommend versions for that model.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/22717...

Also, you can decide with the firmware maturity level. If the maturity level says this version is mature you can choose this version. But every time, you need to read the release notes because some bugs can affect your environment.

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/173707/firmware-maturity-lev...

My opinion about 7.4.3 and 7.4.4, these versions are new. Because of that, a little bit more wait will be beneficial for you before upgrading these versions. Instead of 7.4, you can use 7.2.8.

[Daniyal007]

my point is that there is vulnerability in 7.4.2 and my device is fortigate 2000E, as we see fortigate 2000E is supported on 7.4.4 so my point is should i update it or not as we are corporate sector and we have to maintain level of security updates and our devices should be updated

[Debbie_FTNT]

Hey Daniyal,

as @ozkanaltas already mentioned, we publish a list of recommended firmware (this does take into account known vulnerabilities), which you can find here:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/22717...

This gets regularly updated when new releases are available.

In general, I would recommend later firmware versions in a brach over earlier ones (so 7.4.4 over 7.4.2, for example), as later releases typically include more fixes. As to what branch to go with, that depends a lot on your needs and setup; have a look at the release notes for the recommended versions, and then decide which version you prefer to go with.

If you would like a more professional assessment of your environment, and recommendations tailored to it, please reach out to Fortinet Sales.

Cheers,

Debbie

[ozkanaltas]

Hello @Daniyal007 ,

When I review vulnerabilities on 7.4.2, there are two vulnerabilities. Also, these vulnerabilities have workaround solutions. If applicable for you, you can apply them.

https://www.fortiguard.com/psirt?product=FortiOS-6K7K%2CFortiOS&version=7.4.2

If the workaround is not applicable, you can review the release notes for both versions. If bugs are not affected to you you can upgrade to 7.4.3 or 7.4.4.

[Daniyal007]

so as you said both 7.4.3 and 7.4.4 is not stable version yet ?

[ozkanaltas · Accepted solution]

Hi @Daniyal007 ,

It would not be right to say stable or not. But according to Fortinet's maturity labeling, they are not mature. Therefore, the best thing to do would be to review the release notes for both versions and upgrade.