What do you recommend? Latest 7.2 or 7.4??

[jeff9870]

So to give you guys some context, I have 13 sites globally with 26 total firewalls (All FG200E) that we are going to be looking at upgrading at the end of the year. With Fortinet pushing for either IPSec or ZTNA we have decided to move forward with implementing ZTNA. We already have an EMS server in place, so it just makes the most sense for us. Especially considering we use Microsoft SAML for authentication. We are currently running 7.0.17 on all the FortiGate's, 7.0.12 on the EMS server, and FortiManager is running on 7.4.6

I am just looking to hear on your experiences with the latest mature versions of 7.2 or 7.4 and what you guys would recommend for us? We have not moved on from 7.0 because of how stable everything is right now and the last thing I want is to introduce any kind of bugs and have to deal with that. Anyone else here running ZTNA with SAML SSO?

[AEK]

I have a very experience with 7.2.11, very stable and with EMS/ZTNA as well.

However Fortinet is currently recommending 7.4.7.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recommended-Release-for-FortiOS/ta-p/22717...

I don't have experience with 7.4.7 and "personally" I prefer to stay a little bit more with 7.2.x.

You may check the known issues of 7.2.11 and 7.4.7 before upgrading.

https://docs.fortinet.com/document/fortigate/7.2.11/fortios-release-notes/236526/known-issues

https://docs.fortinet.com/document/fortigate/7.4.7/fortios-release-notes/236526/known-issues

Hope it helps.

[dingjerry_FTNT]

Hi @jeff9870 ,

FortiOS 7.2.11 is pretty stable for now.  Unless you have to fix something with 7.4, you may stay with 7.2, especially FortiOS 7.2 has an extended support period.