DOCUMENT LIBRARY
8.0.0
DOCUMENT LIBRARY
Products
Best Practices
Hardware Guides
Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
All Products
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Web Application Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
Hybrid Mesh Firewall
FortiGate/FortiOS
FortiGate-5000
|
6000
|
7000
NOC Management
FortiManager
|
FortiManager Cloud
Managed Fortigate Service
LAN
FortiSwitch
FortiAP/FortiWiFi
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
More >>
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Lacework FortiCNAPP
Secure Endpoint Connectivity
FortiClient
|
FortiClient Cloud
Web Application / API Protection
FortiWeb
FortiADC
FortiAppSec Cloud
FortiDAST
More >>
Security Operations
Security Operations Automation
FortiAnalyzer
|
FortiAnalyzer Cloud
FortiSIEM
|
FortiSIEM Cloud
FortiSOAR
SOC-as-a-Service (SOCaaS)
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiPAM
Early Detection & Prevention
FortiSandbox
|
FortiSandbox Cloud
FortiNDR
|
FortiNDR Cloud
FortiDeceptor
FortiRecon
More >>
Secure Networking
Hybrid Mesh Firewall
FortiGate/FortiOS
FortiGate-5000
|
6000
|
7000
NOC Management
FortiManager
|
FortiManager Cloud
Managed Fortigate Service
FortiAIOps
LAN
FortiSwitch
FortiAP/FortiWiFi
FortiAP-U Series
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
Communication & Surveillance
FortiVoice
|
FortiVoice Cloud
FortiFone
FortiCamera
FortiRecorder
FortiCentral
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Secure Endpoint Connectivity
FortiClient
|
FortiClient Cloud
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Cloud-Native Security
Lacework FortiCNAPP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiADC
FortiAppSec Cloud
FortiDAST
Security Operations
Security Operations Automation
FortiAnalyzer
|
FortiAnalyzer Cloud
FortiSIEM
|
FortiSIEM Cloud
FortiSOAR
Endpoint
FortiClient
|
FortiClient Cloud
FortiEDR/XDR
Data Protection
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiData
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiToken
|
FortiIdentity Cloud
FortiPAM
Email
FortiMail
FortiSAT
Early Detection & Prevention
FortiSandbox
|
FortiSandbox Cloud
FortiNDR
|
FortiNDR Cloud
FortiDeceptor
FortiRecon
Expert Services
SOC-as-a-Service (SOCaaS)
Edge Firewall
FortiGate/FortiOS
FortiGate-5000
|
6000
|
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
|
FortiManager Cloud
FortiAnalyzer
|
FortiAnalyzer Cloud
Overlay-as-a-Service
SD Branch
FortiSwitch
FortiAP/FortiWiFi
FortiExtender
|
FortiExtender Cloud
Application Delivery
FortiADC
|
FortiGSLB
Single Vendor SASE
FortiSASE
Secure Endpoint Connectivity
FortiClient
|
FortiClient Cloud
Secure Private Access
Secure SD-WAN
Zero Trust Network Access (ZTNA)
Thin Edge
FortiGate/FortiOS
FortiAP/FortiWiFi
FortiExtender
|
FortiExtender Cloud
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiIdentity Cloud
FortiToken
Application Gateway
FortiGate/FortiOS
FortiProxy
FortiADC
|
FortiGSLB
Enterprise Asset Management
FortiClient EMS
Endpoint Agent
FortiClient
|
FortiClient Cloud
Agentless Security Posture
FortiNAC-F
FortiSIEM
|
FortiSIEM Cloud
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiIdentity Cloud
FortiToken
Wireless
FortiAP/FortiWiFi
FortiAP-U Series
FortiGate Cloud
Switching
FortiSwitch
FortiEdge Cloud
FortiNAC-F
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiIdentity Cloud
FortiToken
Privilege Acccess Management
FortiPAM
Next Generation Firewall
FortiGate/FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
|
FortiManager Cloud
FortiAnalyzer
|
FortiAnalyzer Cloud
Expert Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
Web Application / API Protection
FortiWeb
FortiAppSec Cloud
All
FortiADC Public Cloud
FortiAnalyzer Public Cloud
FortiAuthenticator Public Cloud
FortiDeceptor Public Cloud
FortiGate Public Cloud
FortiIsolator Public Cloud
FortiManager Public Cloud
FortiNDR Public Cloud
FortiPAM Public Cloud
FortiPortal Public Cloud
FortiProxy Public Cloud
FortiSandbox Public Cloud
FortiTester Public Cloud
FortiVoice Public Cloud
FortiWeb Manager Public Cloud
FortiWeb Public Cloud
All
FortiADC Private Cloud
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Private Cloud
FortiAuthenticator Private Cloud
FortiDeceptor Private Cloud
FortiGate Private Cloud
FortiManager Private Cloud
FortiNDR Private Cloud
FortiPAM Private Cloud
FortiProxy Private Cloud
FortiSandbox Private Cloud
FortiTester Private Cloud
FortiVoice Private Cloud
FortiWeb Manager Private Cloud
FortiWeb Private Cloud
Account Management
FortiCloud Services
SAAS Management
FortiGate Cloud
FortiClient Cloud
FortiEdge Cloud
FortiExtender Cloud
FortiPresence Cloud
FortiIdentity Cloud
FortiAuthenticator Cloud
FortiZTP
FortiCamera Cloud
SAAS Application Security
FortiWeb Cloud
FortiGSLB
FortiCASB
FortiCNP
FortiInsight
FortiPhish
FortiGate CNF
Managed Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
Platform as a service (PAAS)
FortiSASE
FortiAnalyzer Cloud
FortiManager Cloud
FortiClient Cloud
FortiSandbox Cloud
FortiMail Cloud
FortiSOAR Cloud
Other SAAS Services
Overlay-as-a-Service
FortiRecon
FortiConverter
ForiIPAM
FortiFlex
FortiCare Elite
FortiTIP Cloud
4D Resources
Solution Hubs
Define, design, deploy, demo
4D Pillars
Secure SD-WAN
Zero Trust Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Web Application Firewall
Application Delivery Controller
Curated Links by Solution
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
Next Generation Firewall
FortiAIOps
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP/FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiBranchSASE
FortiCache
FortiCamera
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiFone
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiNDR Cloud
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
AV Engine
AWS Firewall Rules
AscenLink
CTAP Cloud
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Kubernetes Controller
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIGate
FortiAIOps
FortiAP / FortiWiFi
FortiAP-U Series
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAppSec Cloud
FortiAuthenticator
FortiAuthenticator Cloud
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCASB
FortiCNAPP
FortiCNP
FortiCWP
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDLP
FortiDLP Agent
FortiDNS
FortiData
FortiData Private Cloud
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDevice
FortiEDR/XDR
FortiEdge Cloud
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate CNF
FortiGate Cloud
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGuest
FortiHypervisor
FortiIPAM
FortiIdentity Cloud
FortiInsight
FortiInsight Cloud
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail Appliance and VM
FortiMail Cloud - Hosted
FortiMail Workspace Security
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRPS
FortiRecon
FortiRecorder
FortiSASE
FortiSASE-Sovereign
FortiSAT
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSRA Private Cloud
FortiSRA Public Cloud
FortiSandbox
FortiSandbox PaaS
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSwitch
FortiSwitch Manager
FortiSwitch-AX Chassis
FortiSwitchNMS
FortiTIP Cloud
FortiTap
FortiTelemetry
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWLM
FortiWeb
FortiWeb Manager
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiZTP
IPS Engine
Managed FortiGate Service
Overlay-as-a-Service
SOCaaS
Security Awareness and Training
Wireless Controller
Ordering Guides
AV Engine
AWS Firewall Rules
CTAP Cloud
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Kubernetes Controller
FortiADC Manager
FortiAIOps
FortiAP / FortiWiFi
FortiAP-U Series
FortiAnalyzer
FortiAnalyzer BigData
FortiAppSec Cloud
FortiAuthenticator
FortiBranchSASE
FortiCASB
FortiCNAPP
FortiCWP
FortiCamera
FortiCare Elite
FortiCarrier
FortiCentral
FortiClient
FortiCloud Services
FortiController
FortiConverter Service
FortiConverter Tool
FortiDAST
FortiDDoS-F
FortiDLP
FortiDLP Agent
FortiData
FortiDeceptor
FortiDeceptor DaaS
FortiDevSec
FortiDevice
FortiEDR/XDR
FortiEdge Cloud
FortiEndpoint
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate CNF
FortiGate Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGuest
FortiHypervisor
FortiIPAM
FortiIdentity Cloud
FortiInsight
FortiIsolator
FortiMail Appliance and VM
FortiMail Workspace Security
FortiManager
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR Cloud
FortiPAM
FortiPhish
FortiPolicy
FortiPortal
FortiPresence
FortiProxy
FortiRecon
FortiRecorder
FortiSASE
FortiSASE-Sovereign
FortiSIEM
FortiSOAR
FortiSRA
FortiSandbox
FortiSwitch
FortiSwitch Manager
FortiSwitch-AX Chassis
FortiSwitchNMS
FortiTIP Cloud
FortiTelemetry
FortiTester
FortiToken
FortiVoice
FortiWeb
FortiWeb Manager
FortiZTP
IPS Engine
Managed FortiGate Service
SOCaaS
Security Awareness and Training
Wireless Controller
Ordering Guides
All Products
AV Engine
AWS Firewall Rules
AscenLink
CTAP Cloud
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Kubernetes Controller
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIGate
FortiAIOps
FortiAP / FortiWiFi
FortiAP-U Series
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAppSec Cloud
FortiAuthenticator
FortiAuthenticator Cloud
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCASB
FortiCNAPP
FortiCNP
FortiCWP
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDLP
FortiDLP Agent
FortiDNS
FortiData
FortiData Private Cloud
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDevice
FortiEDR/XDR
FortiEdge Cloud
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate CNF
FortiGate Cloud
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGuest
FortiHypervisor
FortiIPAM
FortiIdentity Cloud
FortiInsight
FortiInsight Cloud
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail Appliance and VM
FortiMail Cloud - Hosted
FortiMail Workspace Security
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRPS
FortiRecon
FortiRecorder
FortiSASE
FortiSASE-Sovereign
FortiSAT
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSRA Private Cloud
FortiSRA Public Cloud
FortiSandbox
FortiSandbox PaaS
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSwitch
FortiSwitch Manager
FortiSwitch-AX Chassis
FortiSwitchNMS
FortiTIP Cloud
FortiTap
FortiTelemetry
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWLM
FortiWeb
FortiWeb Manager
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiZTP
IPS Engine
Managed FortiGate Service
Overlay-as-a-Service
SOCaaS
Security Awareness and Training
Wireless Controller
Ordering Guides
FortiGate / FortiOS
FortiManager
FortiAnalyzer
New Features
Overview
GUI
General usability enhancements
Summary panel in Log Details
GUI support for preferred outbound route map options
Seven-day setup period for GUI and CLI configuration
VDOM selection for Central Management in the GUI
GUI support for configuring proxy ARP on VLAN interface
Improve switch management
Display Known Exploited Vulnerabilities from FortiClient
Custom GUI themes and admin‑level personalization
Enhanced GUI support for Inline-CASB SaaS Application
FortiView
Graphical display for application performance monitoring analytics
Network
General
IPv6 Multicast Routing Enhancement with BSR Support Added
BGP neighbor naming support
Increased AS path item for BGP route maps
IPv6 PCP support for DNAT46 in NAT64 deployments
Customizable CoS marking for locally generated ARP packets
Firewall address support for IPAM rules
Graceful BGP shutdown
TCP congestion control enhancement with BBR
Session helper statistics
Enhanced EVPN support for VXLAN Anycast gateway and type-5 routing
Enhanced PIM support for IPv6 across all VRFs
GPON support for FortiGates with SFP/SFP+ ports
802.1X, MAB, dynamic VLAN, and address object support for software switch
Dynamic BGP learning of ISDB reputation IPs
Enhanced multicast session key for virtual wire pair
Next-hop self-support for VPNv4 and VPNv6 route reflectors
IPv6
IPv6 Link-local configuration enhancement
IPv6 proxy address and address group object support
Explicit and transparent proxy
Secure explicit proxy with client certificate blocklist enforcement
SD-WAN
Overlays and underlays
SD-WAN underlay bandwidth steers traffic
ToS-based SD-WAN duplication matching
Stop packet duplication upon reaching bandwidth utilization threshold
Selective SD-WAN duplication
Use secondary tunnel for FEC redundant parity packets
ToS matching and negate options on adaptive FEC profiles
Control SD-WAN interface usage based on monthly traffic volume (quota)
Confine packet duplication across multiple overlays to the same spoke
On-demand duplication at the Hub using remote health-check
Performance SLA
SD-WAN speed test scheduling improvements
Policy and objects
Policies
Upstream SSL/TLS support for virtual load-balancing servers
Objects
Custom tags for addresses, policies, and dynamic tag address groups
Zero Trust Network Access
General
ZTNA configuration simplification
ZTNA service connector
Security posture and EMS connectors
Support tags in dual stack IPv4/IPv6 ZTNA policies
Security profiles
Others
File filter warning action for HTTP downloads
Local URL filtering with custom FortiGuard categories
New classification framework for application signatures and FortiView support
Support for hybrid PQC SSL deep inspection in proxy mode
Enhanced UTM protection with WebSocket traffic inspection
FortiGuard-free rating for local and external categories
Expanded CASB SaaS application database
Protecting LLM and GenAI
Application control support for generative AI
Agentic AI protocol support in FortiOS
VPN
IPsec and Agentless VPN
New Cloud SDN Orchestration VPN wizard for AWS
Support matching firewall policies and policy routes based on source IP geography of dial-up IPsec remote users
Send security posture tags from FortiClient to FortiOS directly as JWT
TLS 1.3 based VPN over TCP
Native VPN remote access support in VPN wizard
Default to IPAM addressing for remote access VPNs in VPN Wizard
Display interface and tunnel alias in various diagnose and get commands
Support SM3/SM4 cryptographic algorithms for IKEv1/ IKEv2
Show only recommended IKE proposals by default
User and authentication
Authentication
Enable secure LDAP connection by default in the GUI
LAN Edge
Wireless
Support FortiAP management through IPv6
Improve CAPWAP stability
Support dynamic redirect URLs from Cisco ISE
Support IPsec traffic offloading from the FortiAP
Enhance DARRP with FortiAIOps
Support up to 16 VAPs on FortiAP G and K-series models
Support Wi-Fi 7 MLO on FortiAP K-series models
Support FQDN in Layer 3 ACLs
Add GUI support for 6 GHz Channel Utilization
Support customizable DHCP Option 82 configurations
Optimize and update default DARRP parameters
Add GUI support for capturing wireless packets
Support tuning Clear Channel Assessment threshold values
Allow FortiAP radio and FortiWiFi local radio to be disabled
Support DVLAN assignments from RADIUS and VLAN pooling together
Support multiple FortiAP groups per VLAN entry for VLAN pooling
Add RADIUS authentication survivability for 802.1X SSIDs
Automated FortiAP location positioning system
Support FortiGuest assignments of RADIUS attributes to MPSK groups
Switch controller
Add maximum power control for PoE ports
Increase number of supported switches
Advertise and control EEE using LLDP in the switch controller
Support trusted host settings for managed switches
Control when custom commands are pushed
Provide private data encryption for managed switches
Support MAC move for managed switches
Enable advanced switching features in the GUI
Control the number of 802.1X-authenticated clients per port
Support IGMP-snooping static group configuration
Dynamic MAB session handling
Enhance NAC/DPP port control and QoS/PoE support
Add global port‑selection criteria for some switch models
Using NAC with 802.1X authentication in the FortiOS GUI
System
General
Configurable timeout for log file system check
Administrator access hardening
SCP file transfers
VM license grace period monitoring enhancement
Configurable FQDN Host header for FortiGate proxy communication
Additional commands supported before device registration
Legal third party disclosure panel
Per VDOM replacement message customization
Configuration revisions and logout backup default changes
FortiAI assistant and CLI Code Lab
Enhancements to required upgrade when firmware license is invalid or device is EOES
High availability
IPv6 support for in-band management IP
Support IPv6 multicast route synchronization in HA
FGSP source IP and interface selection
HA monitoring support for software switch member interfaces
FGCP and FGSP synchronizes full-cone expectation sessions when session-pickup-expectation enabled
Enhanced FGCP monitoring with interface group awareness
GUI support for HA actions, health status, and config diff
FGSP synchronizes firewall-authenticated users
HA role shown in CLI prompt
SNMP
SNMP support for new IP pool statistics OIDs
FortiGuard
Enhanced FortiGuard server selection and load balancing
FortiGuard rating server prioritization improvements
API
API support to manage firmware for FortiGate extended devices
Security Fabric
Fabric settings and connectors
Cloud-based Fabric Feed synchronization
Label-based sandbox exemptions for sensitive data control
Simultaneous FortiSandbox Cloud and on-premise integration
External SDN connectors
Support for Cisco ACI External EPG Subnets in Direct Connector
Negation support in ACI direct connector address filters
Log and report
Logging
Enhanced TACACS+ accounting log detail
Custom log format support for syslog server
Secure log upload enhancements with SFTP and LZ4 support
Cloud
Public and private cloud
AWS SDN connector EKS filtering support
FortiOS Carrier
Selective GTP FGSP sync: only S10 tunnels
Selective GTP FGSP sync: only synchronize GTP tunnels
New RAT types
3G to 4G/5G handover support
Increase GTP tunnel limit per profile to 50M tunnels
FortiASIC
Hardware acceleration
Improvements for NP7-offloaded GRE tunnels
NP7 offloading of TCP and UDP sessions denied by firewall policies to reduce CPU usage
NP7 support for traffic shaping based on dynamic RADIUS VSAs
Hyperscale firewall
New SNMP counters to support CGNAT IP pool monitoring
Hyperscale HA hardware session synchronization improves support for PBR sessions
Hyperscale CGNAT EIF session timer options
Operational Technology
System
MACsec support for FortiGate Rugged Models with hardware switch
FortiGate Rugged digital I/O trigger logging enhancement
Index
8.0.0
Change Log
Home
FortiGate / FortiOS 8.0.0
New Features
8.0.0
8.0.0
7.6.0
7.4.0
7.2.0
7.0.0
6.4.0
6.2.0
LAN Edge
LAN Edge
This section includes information about LAN Edge related new features:
Wireless
Switch controller
Previous
Next
LAN Edge
LAN Edge
This section includes information about LAN Edge related new features:
Wireless
Switch controller
Previous
Next
Home
Products
Summary
Secure Networking
Hybrid Mesh Firewall
FortiGate/FortiOS
FortiGate-5000
FortiGate-6000
FortiGate-7000
NOC Management
FortiManager
FortiManager Cloud
Managed Fortigate Service
LAN
FortiSwitch
FortiAP/FortiWiFi
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
More >>
Hybrid Mesh Firewall
FortiGate/FortiOS
FortiGate-5000
FortiGate-6000
FortiGate-7000
NOC Management
FortiManager
FortiManager Cloud
Managed Fortigate Service
FortiAIOps
LAN
FortiSwitch
FortiAP/FortiWiFi
FortiAP-U Series
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
Communication & Surveillance
FortiVoice
FortiVoice Cloud
FortiFone
FortiCamera
FortiRecorder
FortiCentral
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Lacework FortiCNAPP
Secure Endpoint Connectivity
FortiClient
FortiClient Cloud
Web Application / API Protection
FortiWeb
FortiADC
FortiAppSec Cloud
FortiDAST
More >>
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Secure Endpoint Connectivity
FortiClient
FortiClient Cloud
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Cloud-Native Security
Lacework FortiCNAPP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiADC
FortiAppSec Cloud
FortiDAST
Security Operations
Security Operations Automation
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
FortiSIEM Cloud
FortiSOAR
SOC-as-a-Service (SOCaaS)
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiPAM
Early Detection & Prevention
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiRecon
More >>
Security Operations Automation
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
FortiSIEM Cloud
FortiSOAR
Endpoint
FortiClient
FortiClient Cloud
FortiEDR/XDR
Data Protection
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiData
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiToken
FortiIdentity Cloud
FortiPAM
Email
FortiMail
FortiSAT
Early Detection & Prevention
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiRecon
Expert Services
SOC-as-a-Service (SOCaaS)
By Solution
Secure Networking
Hybrid Mesh Firewall
FortiGate/FortiOS
FortiGate-5000
FortiGate-6000
FortiGate-7000
NOC Management
FortiManager
FortiManager Cloud
Managed Fortigate Service
FortiAIOps
LAN
FortiSwitch
FortiAP/FortiWiFi
FortiAP-U Series
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
Communication & Surveillance
FortiVoice
FortiVoice Cloud
FortiFone
FortiCamera
FortiRecorder
FortiCentral
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Secure Endpoint Connectivity
FortiClient
FortiClient Cloud
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Cloud-Native Security
Lacework FortiCNAPP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiADC
FortiAppSec Cloud
FortiDAST
Security Operations
Security Operations Automation
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
FortiSIEM Cloud
FortiSOAR
Endpoint
FortiClient
FortiClient Cloud
FortiEDR/XDR
Data Protection
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiData
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiToken
FortiIdentity Cloud
FortiPAM
Email
FortiMail
FortiSAT
Early Detection & Prevention
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiRecon
Expert Services
SOC-as-a-Service (SOCaaS)
By 4D Pillars
Secure SD-WAN
Edge Firewall
FortiGate/FortiOS
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
Overlay-as-a-Service
SD Branch
FortiSwitch
FortiAP/FortiWiFi
FortiExtender
FortiExtender Cloud
Application Delivery
FortiADC
FortiGSLB
Secure Access Service Edge(SASE)
Single Vendor SASE
FortiSASE
Secure Endpoint Connectivity
FortiClient
FortiClient Cloud
Secure Private Access
Secure SD-WAN
Zero Trust Network Access (ZTNA)
Thin Edge
FortiGate/FortiOS
FortiAP/FortiWiFi
FortiExtender
FortiExtender Cloud
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiIdentity Cloud
FortiToken
ZTNA
Application Gateway
FortiGate/FortiOS
FortiProxy
FortiADC
FortiGSLB
Enterprise Asset Management
FortiClient EMS
Endpoint Agent
FortiClient
FortiClient Cloud
Agentless Security Posture
FortiNAC-F
FortiSIEM
FortiSIEM Cloud
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiIdentity Cloud
FortiToken
LAN Edge
Wireless
FortiAP/FortiWiFi
FortiAP-U Series
FortiGate Cloud
Switching
FortiSwitch
FortiEdge Cloud
FortiNAC-F
Identity and Access Management
Identity
FortiAuthenticator
FortiAuthenticator Cloud
FortiIdentity Cloud
FortiToken
Privilege Acccess Management
FortiPAM
Next Generation Firewall
Next Generation Firewall
FortiGate/FortiOS
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
Expert Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
Web Application Firewall
Web Application / API Protection
FortiWeb
FortiAppSec Cloud
By Cloud
Public Cloud
All
FortiADC Public Cloud
FortiAnalyzer Public Cloud
FortiAuthenticator Public Cloud
FortiDeceptor Public Cloud
FortiGate Public Cloud
FortiIsolator Public Cloud
FortiManager Public Cloud
FortiNDR Public Cloud
FortiPAM Public Cloud
FortiPortal Public Cloud
FortiProxy Public Cloud
FortiSandbox Public Cloud
FortiTester Public Cloud
FortiVoice Public Cloud
FortiWeb Manager Public Cloud
FortiWeb Public Cloud
Private Cloud
All
FortiADC Private Cloud
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Private Cloud
FortiAuthenticator Private Cloud
FortiDeceptor Private Cloud
FortiGate Private Cloud
FortiManager Private Cloud
FortiNDR Private Cloud
FortiPAM Private Cloud
FortiProxy Private Cloud
FortiSandbox Private Cloud
FortiTester Private Cloud
FortiVoice Private Cloud
FortiWeb Manager Private Cloud
FortiWeb Private Cloud
FortiCloud
Account Management
FortiCloud Services
SAAS Management
FortiGate Cloud
FortiClient Cloud
FortiEdge Cloud
FortiExtender Cloud
FortiPresence Cloud
FortiIdentity Cloud
FortiAuthenticator Cloud
FortiZTP
FortiCamera Cloud
SAAS Application Security
FortiWeb Cloud
FortiGSLB
FortiCASB
FortiCNP
FortiInsight
FortiPhish
FortiGate CNF
Best Practices
4D Resources
Define, Design, Deploy, Demo
Define, design, deploy, demo
4D Pillars
Secure SD-WAN
Zero Trust Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Web Application Firewall
Application Delivery Controller
Solution Hubs
Curated Links by Solution
Curated Links by Solution
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
Next Generation Firewall
Hardware Guides
FortiAIOps
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP/FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiBranchSASE
FortiCache
FortiCamera
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiFone
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiNDR Cloud
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
Products A-Z
AV Engine
AWS Firewall Rules
AscenLink
CTAP Cloud
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Kubernetes Controller
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIGate
FortiAIOps
FortiAP / FortiWiFi
FortiAP-U Series
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAppSec Cloud
FortiAuthenticator
FortiAuthenticator Cloud
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCASB
FortiCNAPP
FortiCNP
FortiCWP
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDLP
FortiDLP Agent
FortiDNS
FortiData
FortiData Private Cloud
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDevice
FortiEDR/XDR
FortiEdge Cloud
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate CNF
FortiGate Cloud
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGuest
FortiHypervisor
FortiIPAM
FortiIdentity Cloud
FortiInsight
FortiInsight Cloud
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail Appliance and VM
FortiMail Cloud - Hosted
FortiMail Workspace Security
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRPS
FortiRecon
FortiRecorder
FortiSASE
FortiSASE-Sovereign
FortiSAT
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSRA Private Cloud
FortiSRA Public Cloud
FortiSandbox
FortiSandbox PaaS
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSwitch
FortiSwitch Manager
FortiSwitch-AX Chassis
FortiSwitchNMS
FortiTIP Cloud
FortiTap
FortiTelemetry
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWLM
FortiWeb
FortiWeb Manager
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiZTP
IPS Engine
Managed FortiGate Service
Overlay-as-a-Service
SOCaaS
Security Awareness and Training
Wireless Controller
Ordering Guides
AV Engine
AWS Firewall Rules
CTAP Cloud
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Kubernetes Controller
FortiADC Manager
FortiAIOps
FortiAP / FortiWiFi
FortiAP-U Series
FortiAnalyzer
FortiAnalyzer BigData
FortiAppSec Cloud
FortiAuthenticator
FortiBranchSASE
FortiCASB
FortiCNAPP
FortiCWP
FortiCamera
FortiCare Elite
FortiCarrier
FortiCentral
FortiClient
FortiCloud Services
FortiController
FortiConverter Service
FortiConverter Tool
FortiDAST
FortiDDoS-F
FortiDLP
FortiDLP Agent
FortiData
FortiDeceptor
FortiDeceptor DaaS
FortiDevSec
FortiDevice
FortiEDR/XDR
FortiEdge Cloud
FortiEndpoint
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate CNF
FortiGate Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGuest
FortiHypervisor
FortiIPAM
FortiIdentity Cloud
FortiInsight
FortiIsolator
FortiMail Appliance and VM
FortiMail Workspace Security
FortiManager
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR Cloud
FortiPAM
FortiPhish
FortiPolicy
FortiPortal
FortiPresence
FortiProxy
FortiRecon
FortiRecorder
FortiSASE
FortiSASE-Sovereign
FortiSIEM
FortiSOAR
FortiSRA
FortiSandbox
FortiSwitch
FortiSwitch Manager
FortiSwitch-AX Chassis
FortiSwitchNMS
FortiTIP Cloud
FortiTelemetry
FortiTester
FortiToken
FortiVoice
FortiWeb
FortiWeb Manager
FortiZTP
IPS Engine
Managed FortiGate Service
SOCaaS
Security Awareness and Training
Wireless Controller
Ordering Guides
Download PDF
Table of Contents
Select Other Version
Overview
GUI
General usability enhancements
Summary panel in Log Details
GUI support for preferred outbound route map options
Seven-day setup period for GUI and CLI configuration
VDOM selection for Central Management in the GUI
GUI support for configuring proxy ARP on VLAN interface
Improve switch management
Display Known Exploited Vulnerabilities from FortiClient
Custom GUI themes and admin‑level personalization
Enhanced GUI support for Inline-CASB SaaS Application
FortiView
Graphical display for application performance monitoring analytics
Network
General
IPv6 Multicast Routing Enhancement with BSR Support Added
BGP neighbor naming support
Increased AS path item for BGP route maps
IPv6 PCP support for DNAT46 in NAT64 deployments
Customizable CoS marking for locally generated ARP packets
Firewall address support for IPAM rules
Graceful BGP shutdown
TCP congestion control enhancement with BBR
Session helper statistics
Enhanced EVPN support for VXLAN Anycast gateway and type-5 routing
Enhanced PIM support for IPv6 across all VRFs
GPON support for FortiGates with SFP/SFP+ ports
802.1X, MAB, dynamic VLAN, and address object support for software switch
Dynamic BGP learning of ISDB reputation IPs
Enhanced multicast session key for virtual wire pair
Next-hop self-support for VPNv4 and VPNv6 route reflectors
IPv6
IPv6 Link-local configuration enhancement
IPv6 proxy address and address group object support
Explicit and transparent proxy
Secure explicit proxy with client certificate blocklist enforcement
SD-WAN
Overlays and underlays
SD-WAN underlay bandwidth steers traffic
ToS-based SD-WAN duplication matching
Stop packet duplication upon reaching bandwidth utilization threshold
Selective SD-WAN duplication
Use secondary tunnel for FEC redundant parity packets
ToS matching and negate options on adaptive FEC profiles
Control SD-WAN interface usage based on monthly traffic volume (quota)
Confine packet duplication across multiple overlays to the same spoke
On-demand duplication at the Hub using remote health-check
Performance SLA
SD-WAN speed test scheduling improvements
Policy and objects
Policies
Upstream SSL/TLS support for virtual load-balancing servers
Objects
Custom tags for addresses, policies, and dynamic tag address groups
Zero Trust Network Access
General
ZTNA configuration simplification
ZTNA service connector
Security posture and EMS connectors
Support tags in dual stack IPv4/IPv6 ZTNA policies
Security profiles
Others
File filter warning action for HTTP downloads
Local URL filtering with custom FortiGuard categories
New classification framework for application signatures and FortiView support
Support for hybrid PQC SSL deep inspection in proxy mode
Enhanced UTM protection with WebSocket traffic inspection
FortiGuard-free rating for local and external categories
Expanded CASB SaaS application database
Protecting LLM and GenAI
Application control support for generative AI
Agentic AI protocol support in FortiOS
VPN
IPsec and Agentless VPN
New Cloud SDN Orchestration VPN wizard for AWS
Support matching firewall policies and policy routes based on source IP geography of dial-up IPsec remote users
Send security posture tags from FortiClient to FortiOS directly as JWT
TLS 1.3 based VPN over TCP
Native VPN remote access support in VPN wizard
Default to IPAM addressing for remote access VPNs in VPN Wizard
Display interface and tunnel alias in various diagnose and get commands
Support SM3/SM4 cryptographic algorithms for IKEv1/ IKEv2
Show only recommended IKE proposals by default
User and authentication
Authentication
Enable secure LDAP connection by default in the GUI
LAN Edge
Wireless
Support FortiAP management through IPv6
Improve CAPWAP stability
Support dynamic redirect URLs from Cisco ISE
Support IPsec traffic offloading from the FortiAP
Enhance DARRP with FortiAIOps
Support up to 16 VAPs on FortiAP G and K-series models
Support Wi-Fi 7 MLO on FortiAP K-series models
Support FQDN in Layer 3 ACLs
Add GUI support for 6 GHz Channel Utilization
Support customizable DHCP Option 82 configurations
Optimize and update default DARRP parameters
Add GUI support for capturing wireless packets
Support tuning Clear Channel Assessment threshold values
Allow FortiAP radio and FortiWiFi local radio to be disabled
Support DVLAN assignments from RADIUS and VLAN pooling together
Support multiple FortiAP groups per VLAN entry for VLAN pooling
Add RADIUS authentication survivability for 802.1X SSIDs
Automated FortiAP location positioning system
Support FortiGuest assignments of RADIUS attributes to MPSK groups
Switch controller
Add maximum power control for PoE ports
Increase number of supported switches
Advertise and control EEE using LLDP in the switch controller
Support trusted host settings for managed switches
Control when custom commands are pushed
Provide private data encryption for managed switches
Support MAC move for managed switches
Enable advanced switching features in the GUI
Control the number of 802.1X-authenticated clients per port
Support IGMP-snooping static group configuration
Dynamic MAB session handling
Enhance NAC/DPP port control and QoS/PoE support
Add global port‑selection criteria for some switch models
Using NAC with 802.1X authentication in the FortiOS GUI
System
General
Configurable timeout for log file system check
Administrator access hardening
SCP file transfers
VM license grace period monitoring enhancement
Configurable FQDN Host header for FortiGate proxy communication
Additional commands supported before device registration
Legal third party disclosure panel
Per VDOM replacement message customization
Configuration revisions and logout backup default changes
FortiAI assistant and CLI Code Lab
Enhancements to required upgrade when firmware license is invalid or device is EOES
High availability
IPv6 support for in-band management IP
Support IPv6 multicast route synchronization in HA
FGSP source IP and interface selection
HA monitoring support for software switch member interfaces
FGCP and FGSP synchronizes full-cone expectation sessions when session-pickup-expectation enabled
Enhanced FGCP monitoring with interface group awareness
GUI support for HA actions, health status, and config diff
FGSP synchronizes firewall-authenticated users
HA role shown in CLI prompt
SNMP
SNMP support for new IP pool statistics OIDs
FortiGuard
Enhanced FortiGuard server selection and load balancing
FortiGuard rating server prioritization improvements
API
API support to manage firmware for FortiGate extended devices
Security Fabric
Fabric settings and connectors
Cloud-based Fabric Feed synchronization
Label-based sandbox exemptions for sensitive data control
Simultaneous FortiSandbox Cloud and on-premise integration
External SDN connectors
Support for Cisco ACI External EPG Subnets in Direct Connector
Negation support in ACI direct connector address filters
Log and report
Logging
Enhanced TACACS+ accounting log detail
Custom log format support for syslog server
Secure log upload enhancements with SFTP and LZ4 support
Cloud
Public and private cloud
AWS SDN connector EKS filtering support
FortiOS Carrier
Selective GTP FGSP sync: only S10 tunnels
Selective GTP FGSP sync: only synchronize GTP tunnels
New RAT types
3G to 4G/5G handover support
Increase GTP tunnel limit per profile to 50M tunnels
FortiASIC
Hardware acceleration
Improvements for NP7-offloaded GRE tunnels
NP7 offloading of TCP and UDP sessions denied by firewall policies to reduce CPU usage
NP7 support for traffic shaping based on dynamic RADIUS VSAs
Hyperscale firewall
New SNMP counters to support CGNAT IP pool monitoring
Hyperscale HA hardware session synchronization improves support for PBR sessions
Hyperscale CGNAT EIF session timer options
Operational Technology
System
MACsec support for FortiGate Rugged Models with hardware switch
FortiGate Rugged digital I/O trigger logging enhancement
Index
8.0.0
Change Log
8.0.0
7.6.0
7.4.0
7.2.0
7.0.0
6.4.0
6.2.0