Fortinet Security Fabric upgrade

FortiOS 7.2.5 greatly increases the interoperability between other Fortinet products. This includes:

FortiAnalyzer	7.2.3
FortiManager	7.2.3
FortiExtender	7.4.0 and later
FortiSwitch OS (FortiLink support)	6.4.6 build 0470 or later
FortiAP FortiAP-S FortiAP-U FortiAP-W2	See Strong cryptographic cipher requirements for FortiAP
FortiClient* EMS	7.0.3 build 0229 or later
FortiClient* Microsoft Windows	7.0.3 build 0193 or later
FortiClient* Mac OS X	7.0.3 build 0131 or later
FortiClient* Linux	7.0.3 build 0137 or later
FortiClient* iOS	7.0.2 build 0036 or later
FortiClient* Android	7.0.2 build 0031 or later
FortiSandbox	2.3.3 and later for post-transfer scanning 4.2.0 and later for post-transfer and inline scanning

^* If you are using FortiClient only for IPsec VPN or SSL VPN, FortiClient version 6.0 and later are supported.

When upgrading your Security Fabric, devices that manage other devices should be upgraded first.

When using FortiClient with FortiAnalyzer, you should upgrade both to their latest versions. The versions between the two products should match. For example, if using FortiAnalyzer 7.2.0, use FortiClient 7.2.0.

Upgrade the firmware of each device in the following order. This maintains network connectivity without the need to use manual steps.

1. FortiAnalyzer
2. FortiManager
3. Managed FortiExtender devices
4. FortiGate devices
5. Managed FortiSwitch devices
6. Managed FortiAP devices
7. FortiClient EMS
8. FortiClient
9. FortiSandbox
10. FortiMail
11. FortiWeb
12. FortiNAC
13. FortiVoice
14. FortiDeceptor
15. FortiNDR
16. FortiTester
17. FortiMonitor
18. FortiPolicy

If Security Fabric is enabled, then all FortiGate devices must be upgraded to 7.2.5. When Security Fabric is enabled in FortiOS 7.2.5, all FortiGate devices must be running FortiOS 7.2.5.