Lower version of Fortimanager to Manage FGs with higher version

[renzanjopcaparas]

Hi everyone! 

Good day and greetings! 

I know that there could be a topic on this somewhere and this is a general question but please bear with my st*pidity and ignorance.

My FMG_VM64_AZURE is running v7.2.10-build1682 250211 (GA). Our managed fortigates (Both Hardware and VM) are running 7.2.11,build1740 (GA) (Mature). 

Now we've been planning on upgrading because our current firmware versions are affected by these  vulnerabilities

https://www.fortiguard.com/psirt/FG-IR-25-647 

Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

We need to upgrade to atleast 7.2.12 or above version. We're planning on going to 7.4.x

1. I don't see any 7.2.12 version for Fortimanager VM. Am I seeing it correctly?

2. I know this is a st*pid question, but if I upgrade my managed Fortigates to 7.4.8, should I upgrade my Fortimanager to 7.4.7? FMG is still lower than the FG if this is the case.

3. Does anybody had any major issues to share when you transitioned to 7.4.x?

Thank you all!

[funkylicious]

hi,

according to https://docs.fortinet.com/compatibility-tool/fortimanager/fortigate , if you leave FMG at 7.2.12 version it would/should not support FortiOS 7.4.x version.

upgrading FMG to 7.4.8 would support FortiOS up until 7.4 ( including ) 

[renzanjopcaparas]

Hi @funkylicious , thank you very much! I did not see the 7.2.12 in the drop down box. But, if l left the FMG version to 7.2.10 (our current version), it is showing 7.2.12 is no longer supported. 

The vulnerability suggests to upgrade to 7.2.12 or above. I think the best solution for this is to upgrade both FMG, FAnalyzer, Fcollector and FGs to 7.4.8. 

Do you agree?

Is there a certain hop that i need to take when upgrading from 7.2.x to 7.4.8?

Regards!

[funkylicious]

hi,

I agree that the lastest version of 7.4 release would be the preferred one.

as for the hops, usually there's a upgrade path to follow when you want to upgrade from a version to another and it's good to follow it - https://docs.fortinet.com/upgrade-tool/fortigate here you select the product ( FortiOS / FortiManager / FortiAnalyzer ) select the source version and the target one and it will tell you what is the recommended path to follow to reach the target.