Upgrading to FortiOS 7.4.xx

[yeowkm99]

we are currently on FortiOS 7.2.7.

is there any benefit to upgrading to 7.4.xx ?

is there any vulnerability that is patched in 7.4.xx that is now in 7.2.7 ?

[AlexC-FTNT]

Generally you will find this information in the Release notes.
It is mostly about new features and/or bug fixes.

In terms of vulnerabilities, both are supported FortiOS versions, so any Vulnerability fix should be implemented in both.

[ozkanaltas]

Hello @yeowkm99 ,

You can find the vulnerabilities affecting version 7.2.7 at this link.

https://www.fortiguard.com/psirt?product=FortiOS-6K7K%2CFortiOS&version=7.2.7

If you want to get more information on new features in 7.4 versions, you can review this document. 

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/770045/overview

[yeowkm99]

am i right to say that we only upgrade to 7.4.xx if we want the new features of 7.4, if not we then patch 7.2.x when ever there is vulnerabilities found for the current version we are using

[ozkanaltas · Accepted solution]

Hello @yeowkm99 ,

You are right. 

New features coming with the new versions. If you do not want to use these features you don't need to upgrade your firewall, except for one situation. All version support ends in time. Because of that, you need to check these dates and you need to upgrade your firewall before these dates.

And also, you can follow the version according to maturity level. For example 7.4.3 not reach maturity level yet. But 7.2.8 or 7.2.7 are mature versions.

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/173707/firmware-maturity-lev...