FortiGate models
The FortiOS release Fortinet recommends for each model and VM it lists, and what each one can’t do.
Fortinet’s recommended releases
Important changes
Find your model
| Model | Family | Recommended | Hardware support |
|---|
Loading…
Check a list of FortiGatesPaste your estate to see every unit’s dates and recommended firmware, and download a CSV
Browse all modelsFilter by family or status
What the dates mean
- End of order
- Last day Fortinet sells the model. Existing units are still supported, so this is the moment to start planning a replacement.
- Last renewal
- Last day to buy or renew a support contract (Fortinet calls it the Last Service Extension Date). Usually four years after end of order. After this you can’t extend cover.
- End of support
- No more TAC help, hardware replacements (RMA) or firmware. Usually five years after end of order. Replace the unit before this date.
Dates come from Fortinet’s Product Life Cycle export, last loaded on the date shown. Models with no dates aren’t in the export yet because Fortinet hasn’t announced an end of order. The export needs a Fortinet support login, so confirm critical dates in the support portal. FortiOS branch dates are on the Firmware page. How we check
Branch timeline
Each FortiOS branch gets full support from release, then limited fixes, then no fixes at all. Hardware has its own dates, on the Lifecycle page.
- Full support
- Bug fixes and security fixes. Fortinet calls the end of this End of Engineering Support (EoES).
- Limited fixes
- After End of Engineering Support, routine bug fixing ends. Until End of Support, Fortinet only releases maintenance builds for industry-wide critical issues and PSIRT vulnerabilities (its Life Cycle Policy calls this the Must Fix phase). Plan to move to a newer branch.
- End of support
- No more fixes and no TAC help for that branch (EoS). The exception is a model that can’t run a newer branch: its final firmware stays in the Must Fix phase until the hardware’s End of Support. Either way, plan to replace it.
Things to know
Some units upgrade themselves
From FortiOS 7.4.8, 7.6.4 and 8.0.0, a FortiGate without a valid support contract, or on a branch past EoES, can be upgraded automatically to the latest patch in its branch. FortiManager-managed units are excluded. Automatic patch upgrades may also be on by default, so check the setting if you work to change windows. Fortinet KB ↗
7.4 and 7.6 got an extra year
Fortinet extended EoES and EoS by 12 months for FortiOS 7.4 and 7.6 (CSB-260330-1, March 2026). Dates on this page include the extension.
Older models have a ceiling
Some models drop out of Fortinet’s supported-model lists on newer branches, so their recommended release is on the last branch they support. Look yours up on the Models page.
Sources
What the status labels mean
- Up to date
- The automatic check ran in the last day and succeeded.
- Verified
- Checked by hand against Fortinet, not by the automatic check.
- Refresh delayed
- More than a day since the last successful check. What you see is still the last good data.
- Check failed
- The last automatic attempt failed. The page keeps showing the last good data and says when it was from.
What’s ours and what’s Fortinet’s
- Every build number, date and advisory comes from Fortinet, with a link to the source wherever it appears.
- The plain-English summaries, and whether a release-note change counts as breaking, an action or worth knowing, are our reading of Fortinet’s documents.
- Where models share hardware, a model page can show its sibling’s drawing and says so.
- GateFirmware is independent and not affiliated with or endorsed by Fortinet. Always read the release notes before upgrading production.
Change log
Releases, support milestones, advisories and updates to this site, newest first. Built from the same data the rest of the site uses.
Coming up
Why it exists
Fortinet publishes what you need to plan FortiGate firmware, but it’s spread across a recommended-releases article, a set of release notes for every build, FortiGuard security advisories, Customer Support Bulletins and a Product Life Cycle table behind a support login.
GateFirmware brings that together for each model, in plain English, with a link back to Fortinet’s own document wherever a fact appears.
What it does
- What should I run?Firmware recommendations
The release Fortinet recommends for each model and VM it lists, the latest build on that branch, the latest the model can run and any advisories still open.
- What if I upgrade?Upgrade guidance
What changes between two builds: the breaking changes, required actions, security fixes and known issues from Fortinet’s release notes.
- How long have I got?Lifecycle tracking
End of order, last renewal and end of support dates for every FortiGate, plus a check for a whole list of units. FortiOS branch dates are on the Firmware page.
How the information is kept up to date
- An automatic check runs every morning. It looks for new FortiOS builds and release notes, changes to Fortinet’s recommended releases and FortiOS support dates, new FortiGuard advisories and CISA’s list of exploited vulnerabilities.
- A change is only recorded once it’s confirmed in a Fortinet source. Other sites can prompt a check but never change the data, and CISA’s list is only used to mark a vulnerability as exploited.
- Hardware dates come from Fortinet’s Product Life Cycle export, downloaded from the support portal each month. Every dated model is checked against it.
- Every check is recorded. If one fails, the site keeps showing the last good data and the status at the top of each page says so.
- Summaries, and whether a change counts as breaking, an action or worth knowing, are our reading of Fortinet’s documents.
The full source list, check schedule and change log are on How we check.
Relationship to Fortinet
GateFirmware is not an official Fortinet product and isn’t endorsed by Fortinet. Fortinet’s documents are the authority: read the release notes before a production change, and follow guidance from your Fortinet SE, Professional Services or TAC where it applies.
Fortinet, FortiGate, FortiOS and FortiGuard are trademarks of Fortinet, Inc.
Privacy
There are no accounts, adverts or tracking cookies. To see which pages are useful, the site counts visits with Vercel Web Analytics. Vercel hosts the site and processes this data on our behalf.
For each page view it records the page, the site you came from, your rough location, your browser, operating system and device type. It doesn’t set cookies. Visits are told apart by a value worked out from the request, which is thrown away after 24 hours, so nobody can be followed from one day to the next. We only see totals, and the reports cover the last month.
The site also saves a few choices in your browser, such as dark mode, the features you picked in the upgrade planner and ticked checklist items. They stay on your device.
Analytics is on in this browser.
If your browser sends a Global Privacy Control signal, analytics stays off.
Fortinet’s own resources
- Recommended releases for FortiOS (opens in a new tab)Fortinet Community
- FortiOS release notes (opens in a new tab)Fortinet Document Library
- Upgrade Path Tool (opens in a new tab)Fortinet Document Library
- PSIRT advisories (opens in a new tab)FortiGuard Labs
- Product Life Cycle (opens in a new tab)Support portal, login needed
Loading…
Loading…
Loading…
- HomeRecommended releases and what’s changed
- ModelsFortinet’s recommended release for each model
- FirmwareFortiOS branches and every release
- Upgrade plannerWhat changes when you upgrade
- LifecycleHardware support dates