I would like to inquire about FortiSwitch 424D / FortiAP 221E upgrade.

[Coworksit1]

Hi, everyone.

I'm curious about the same content as the title, so I post it on the forum. 

FortiAP is currently using FP221E and FP231F

FortiSwitch is using 124E and 424D

I'm trying to patch both AP and Switch

FP231F is patched to v7.2.5 and I'm trying to patch FP221E with the same version, but I don't see the latest Firmware Image of FP221E

The current operating system version of FP221E is FP221E-v7.2-build0280.

I also tried to patch FortiSwitch 124E to v7.4.2 and patch 424D to the same version, but I don't see the latest Firmware Image as above.

The current OS version of 424D is S424DN-v6.2.4-build213,200501 GA.

https://www.fortiguard.com/psirt/FG-IR-22-038

In particular, fortiswitch is trying to patch it to solve the vulnerability, and if you know the answer to my question, please reply.

Thank you.

[ymorohashi · Accepted solution]

FortiAP-221E is Wave2 model and its OS is different from 802.1ax model, F/G model.
So release timing is also different.
please wait some while for the next patch release for 221E.

FortiSwitch-424D has been already reached EoO(End of Orfer) at FY20.
and 7.0 is the last GA support the model.
the vuln you concerned is fixed on 7.0.5 and the latest patch release is 7.0.10.
Please upgrade to 7.0.10 against the vuln.

BTW. FortiSwitchOS 7.0 is out of Engineering support now, means Fortinet Devlopper will not fix any issue on FortiSwtichOS 7.0.
So you need to plan replace your 424D with newer model.

Thanks

[Coworksit1]

Thank you for your answer

I have an additional question

As written in the text, the OS version of FortiAP-221E is FP221E-v7.2-build0280

May I know the detailed version of v7.2-build0280?

to explain in detail

FP231F-v7.2-build0409 = belongs to v7.2.5

FP221E-v7.2-build0280 = v7.2.?

It is not possible to check on the page downloading firmware image.

Please check and reply.

Thank you.

[ymorohashi]

FP221E-v7.2-build0280 is "v7.2.1" for FAP-221E