Managing mixed FortiOS versions 6.4 and 7.0 in a single ADOM 7.0.1

FortiManager ADOM version 6.4 can concurrently manage FortiGate units running FortiOS 6.4.x and FortiOS 7.0.x. You can now upgrade ADOM version 6.4 to 7.0 before upgrading all FortiGates in the ADOM to FortiOS 7.0.x.

Although you can use a 6.4 ADOM to manage mixed FortiOS versions, it is recommended to upgrade all FortiGates to FortiOS 7.0.x, and then upgrade the ADOM from version 6.4 to 7.0. See also ADOM upgrade from 6.4 to 7.0 7.0.1.

After you upgrade the ADOM to version 7.0, you can install policy package version 7.0 to FortiGates in the ADOM running FortiOS 7.0.x and FortiOS 6.4.x. FortiManager automatically downgrades the CLI to version 6.4 for FortiGate devices in the ADOM running FortiOS 6.4.x.

In the following example, an ADOM version 6.4 named root contains a mix of FortiGates running version 7.0.x and 6.4.x:

However, you can select Upgrade from the More menu to upgrade the ADOM from version 6.4 to 7.0:

After upgrading the ADOM from version 6.4 to 7.0, features for ADOM version 7.0 are available. The following example of the Policy & Objects pane is for ADOM version 6.4:

After upgrading to ADOM version 7.0, the following features are available on the Policy & Objects pane:

When you install the policy package from ADOM version 7.0 to FortiGates running FortiOS 6.4.x and FortiGates running FortiOS 7.0.x, FortiManager automatically downgrades the 7.0 CLI to 6.4 CLI for FortiGates running FortiOS 6.4.x.

For example, the following policy package is for ADOM 7.0:

You can install the policy package to FortiGate devices in ADOM 7.0 running both FortiOS 6.4.x and FortiOS 7.0.x. In the preview for both devices, you can view what is installed to each device: