↑↓ to moveEnter to openEsc to close

CheckedSources and changes

About GateFirmware

Why this site exists, what it does and where its information comes from.

Fortinet’s recommended releases

Important changes

Find your model

ModelFamilyRecommendedHardware support

Loading…

Check a list of FortiGatesPaste your estate to see every unit’s dates and recommended firmware, and download a CSV
Browse all modelsFilter by family or status

What the dates mean

End of order
Last day Fortinet sells the model. Existing units are still supported, so this is the moment to start planning a replacement.
Last renewal
Last day to buy or renew a support contract (Fortinet calls it the Last Service Extension Date). Usually four years after end of order. After this you can’t extend cover.
End of support
No more TAC help, hardware replacements (RMA) or firmware. Usually five years after end of order. Replace the unit before this date.

Dates come from Fortinet’s Product Life Cycle export, last loaded on the date shown. Models with no dates aren’t in the export yet because Fortinet hasn’t announced an end of order. The export needs a Fortinet support login, so confirm critical dates in the support portal. FortiOS branch dates are on the Firmware page. How we check

Branch timeline

Each FortiOS branch gets full support from release, then limited fixes, then no fixes at all. Hardware has its own dates, on the Lifecycle page.

Full support Limited fixes Today
Full support
Bug fixes and security fixes. Fortinet calls the end of this End of Engineering Support (EoES).
Limited fixes
After End of Engineering Support, routine bug fixing ends. Until End of Support, Fortinet only releases maintenance builds for industry-wide critical issues and PSIRT vulnerabilities (its Life Cycle Policy calls this the Must Fix phase). Plan to move to a newer branch.
End of support
No more fixes and no TAC help for that branch (EoS). The exception is a model that can’t run a newer branch: its final firmware stays in the Must Fix phase until the hardware’s End of Support. Either way, plan to replace it.

Things to know

Some units upgrade themselves

From FortiOS 7.4.8, 7.6.4 and 8.0.0, a FortiGate without a valid support contract, or on a branch past EoES, can be upgraded automatically to the latest patch in its branch. FortiManager-managed units are excluded. Automatic patch upgrades may also be on by default, so check the setting if you work to change windows. Fortinet KB ↗

7.4 and 7.6 got an extra year

Fortinet extended EoES and EoS by 12 months for FortiOS 7.4 and 7.6 (CSB-260330-1, March 2026). Dates on this page include the extension.

Older models have a ceiling

Some models drop out of Fortinet’s supported-model lists on newer branches, so their recommended release is on the last branch they support. Look yours up on the Models page.

Sources

    What the status labels mean

    Up to date
    The automatic check ran in the last day and succeeded.
    Verified
    Checked by hand against Fortinet, not by the automatic check.
    Refresh delayed
    More than a day since the last successful check. What you see is still the last good data.
    Check failed
    The last automatic attempt failed. The page keeps showing the last good data and says when it was from.

    What’s ours and what’s Fortinet’s

    • Every build number, date and advisory comes from Fortinet, with a link to the source wherever it appears.
    • The plain-English summaries, and whether a release-note change counts as breaking, an action or worth knowing, are our reading of Fortinet’s documents.
    • Where models share hardware, a model page can show its sibling’s drawing and says so.
    • GateFirmware is independent and not affiliated with or endorsed by Fortinet. Always read the release notes before upgrading production.

    Change log

    Releases, support milestones, advisories and updates to this site, newest first. Built from the same data the rest of the site uses.

      Coming up

        Why it exists

        Fortinet publishes what you need to plan FortiGate firmware, but it’s spread across a recommended-releases article, a set of release notes for every build, FortiGuard security advisories, Customer Support Bulletins and a Product Life Cycle table behind a support login.

        GateFirmware brings that together for each model, in plain English, with a link back to Fortinet’s own document wherever a fact appears.

        What it does

        • What should I run?Firmware recommendations

          The release Fortinet recommends for each model and VM it lists, the latest build on that branch, the latest the model can run and any advisories still open.

          Find your model

        • What if I upgrade?Upgrade guidance

          What changes between two builds: the breaking changes, required actions, security fixes and known issues from Fortinet’s release notes.

          Plan an upgrade

        • How long have I got?Lifecycle tracking

          End of order, last renewal and end of support dates for every FortiGate, plus a check for a whole list of units. FortiOS branch dates are on the Firmware page.

          Check support dates

        How the information is kept up to date

        • An automatic check runs every morning. It looks for new FortiOS builds and release notes, changes to Fortinet’s recommended releases and FortiOS support dates, new FortiGuard advisories and CISA’s list of exploited vulnerabilities.
        • A change is only recorded once it’s confirmed in a Fortinet source. Other sites can prompt a check but never change the data, and CISA’s list is only used to mark a vulnerability as exploited.
        • Hardware dates come from Fortinet’s Product Life Cycle export, downloaded from the support portal each month. Every dated model is checked against it.
        • Every check is recorded. If one fails, the site keeps showing the last good data and the status at the top of each page says so.
        • Summaries, and whether a change counts as breaking, an action or worth knowing, are our reading of Fortinet’s documents.

        The full source list, check schedule and change log are on How we check.

        Relationship to Fortinet

        GateFirmware is not an official Fortinet product and isn’t endorsed by Fortinet. Fortinet’s documents are the authority: read the release notes before a production change, and follow guidance from your Fortinet SE, Professional Services or TAC where it applies.

        Fortinet, FortiGate, FortiOS and FortiGuard are trademarks of Fortinet, Inc.

        Privacy

        There are no accounts, adverts or tracking cookies. To see which pages are useful, the site counts visits with Vercel Web Analytics. Vercel hosts the site and processes this data on our behalf.

        For each page view it records the page, the site you came from, your rough location, your browser, operating system and device type. It doesn’t set cookies. Visits are told apart by a value worked out from the request, which is thrown away after 24 hours, so nobody can be followed from one day to the next. We only see totals, and the reports cover the last month.

        The site also saves a few choices in your browser, such as dark mode, the features you picked in the upgrade planner and ticked checklist items. They stay on your device.

        Analytics is on in this browser.

        If your browser sends a Global Privacy Control signal, analytics stays off.

        Fortinet’s own resources

        Loading…

        Loading…

        Loading…