What's new for FortiGate-7000E 6.4.8

FortiGate-7000E for FortiOS 6.4.8 includes the following new features:

• Load balancing SSL VPN tunnel mode sessions terminated by the FortiGate-7000E to all FPMs, see SSL VPN load balancing.

• The Configuration Sync monitor displays management and data plane resource usage, see Configuration sync monitor.

• You can control how the FortiGate-7000E partitions source NAT (SNAT) source ports among FPMs, see Controlling SNAT port partitioning behavior.

• A number of improvements and bug fixes related to SD-WAN comparability with session-aware load balancing clustering (SLBC). The primary FPM performs health checking and synchronizes health checking-based SD-WAN routing decisions to the other FPMs. In an FGCP HA cluster, the SD-WAN routing decisions are synchronized from the primary FPM of the primary FortiGate-7000E to the FPMs in the secondaryFortiGate-7000E.

  The FortiGate-7000E now supports weight-based and volume-based SD-WAN load-balancing methods:

  config system virtual-wan-link

  set load-balance-mode {weight-based | measured-volume-based}

  end

• All CLI command output, GUI pages, log messages, and SNMP queries and traps use the terminology "primary" and "secondary" in place of "master" and "slave". This change does not currently apply to config CLI options. The command execute load-balance slot set-master-worker has been changed to execute load-balance slot set-primary-worker.

You can find the FortiGate-7000E for FortiOS 6.4.8 firmware images on the Fortinet Support Download Firmware Images page by selecting the FortiGate-6K7K product.