What's new for FortiGate-6000 6.4.6

FortiGate-6000 for FortiOS 6.4.6 includes the following new features:

• Dynamic routing in IPsec VPN tunnels terminated by the FortiGate. For information about IPsec VPN support, see FortiGate-6000 IPsec VPN.

• Using a LAG for FGSP session synchronization, see Creating an HA1/HA2 LAG for FGSP session synchronization .

• SD-WAN with multiple IPsec VPN tunnels, see SD-WAN with multiple IPsec VPN tunnels.

• Set a FortiGate-6000 in an HA cluster to always become the primary, see Setting a FortiGate-6000 to always be the primary FortiGate-6000.

• Send certificate queries for proxy firewall policies using a FortiGate-6000 management interface instead of a data interface, see Global option for proxy-based certificate queries.

• IPv6 DDNS client for generic DDNS servers. For more information, see FortiGate as an IPv6 DDNS client for generic DDNS.

• Security Rating reports when operating in Multi VDOM mode. The report is generated from the global GUI and includes results for the global configuration and for each VDOM. For more information, see Security rating report in multi VDOM mode.

• Synchronizing wildcard FQDN IP address changes between FPCs and between FortiGate-6000s in an FGCP HA configuration. For more information about this feature, see Synchronize wildcard FQDN resolved addresses to autoscale peers.

• The tcpsyn-max and tcpsyn-ack-max NP6 HPE options, see NP6 HPE host protection engine.

• NP6 HPE monitoring, see Monitoring NP6 HPE activity.

You can find the FortiGate-6000 for FortiOS 6.4.6 firmware images on the Fortinet Support Download Firmware Images page by selecting the FortiGate-6K7K product.