New Features

• Expanding Fabric Family
  • Telemetry Integration - New FTNT Products
  • Telemetry Integration - AWS Cloud Segments
  • SAML SSO for Fabric Devices
  • Split-Task VDOM Support
  • Dynamic Policy - Fabric Devices
  • Fabric Member Synchronization
    • Simplify FortiAnalyzer Pairing
    • FortiSandbox
    • FortiClient EMS
  • Security Rating
    • Security Rating - Extend Checks to FortiAnalyzer
    • Security Rating – Historical Rating Dashboard Widget
    • Comprehensive Report Extensions
  • Endpoint
    • Dynamic Policy – FortiClient EMS (Connector)
    • Captive Portal for Compliance Failure
    • FortiToken Cloud
    • EMS fabric connector GUI support  6.2.1
    • FortiToken Cloud multi-factor authentication in the GUI  6.2.1
  • Wireless
    • WiFi Location Map
    • Monitor and Suppress Phishing SSID
    • WiFi QoS Enhancement
    • Airtime Fairness
    • Extended Details on AP Drill Down
    • Troubleshooting – Extended Logging
    • Override WiFi Certificates (from GUI)
    • Wireless MAC Filter Updates
    • Change SSID to VDOM Object
    • Direct SNMP Monitoring
    • Supporting WPA3 on FAP  6.2.1
  • Switching
    • FortiLink Setup
    • Voice VLAN Auto-Assignment
    • Dynamic VLAN 'Name' Assignment from RADIUS Attribute
    • Netflow / IPFIX Support
    • QoS Assignment and Rate Limiting for Quarantined VLANs
    • Persistent MAC Learning (Sticky MAC)
    • Split Port Mode for QSFP ports
    • Virtual Switch Extensions
    • MSTI Support
    • FortiLink Auto Network Configuration Policy
    • FortiLink MCLAG configuration in GUI
    • FortiLink Network Sniffer Extension
    • Leverage SAML to switch between Security Fabric FortiGates  6.2.1
  • Leverage LLDP to Simplify Security Fabric Negotiation
  • Configuring single-sign-on in the Security Fabric  6.2.2
  • FSSO dynamic address subtype  6.2.2
  • VMware NSX-T managed by FortiManager  6.2.2
• Fabric Connectors
  • Multiple Concurrent SDN/Cloud Connectors
  • Filter Lookup Improvement for SDN Connectors
  • Obtain full user information through the MS Exchange connector
  • Cloud Connector - AliCloud
  • Cloud Connector - AWS - IAM Support
  • SDN Connector - VMware ESXi
  • Kubernetes (K8s)
    • Private Cloud K8s Connector
    • AWS Kubernetes (EKS) Connector
    • Azure Kubernetes (AKS) Connector
    • GCP Kubernetes (GKE) Connector
    • Oracle Kubernetes (OKE) Connector
  • SDN Connector - Azure Stack
  • SDN Connector - OpenStack Domain Filter
  • Endpoint Connector - Cisco pxGrid
  • External Block List (Threat Feed) – Policy
  • External Block List (Threat Feed) - File Hashes
  • External Block List (Threat Feed) - Authentication
  • Connector GUI Organization
  • Use active directory objects directly in policy  6.2.1
  • Endpoint connector - FortiNAC  6.2.1
  • LDAP connector to get more user information from user login IDs  6.2.1
  • OCI SDN connector  6.2.1
  • ClearPass endpoint connector via FortiManager  6.2.2
  • ClearPass integration for dynamic address objects  6.2.2
  • Symantec endpoint connector  6.2.2
  • Support for wildcard SDN connectors in filter configurations  6.2.3
  • FortiClient EMS Cloud support  6.2.3
• SD-WAN
  • Overlay Controller VPN (OCVPN)
    • Hub-and-Spoke Support
    • ADVPN Support
    • Multiple VPN Support
    • OCVPN free license updates  6.2.1
  • SD-WAN Bandwidth Monitoring Service
  • Rule Definition Improvements
    • Load Balancing Per-Rule
    • Interface Cost
    • DSCP Matching (Shaping)
    • Traffic Shaping Schedules
    • Application Groups in Policies
    • Internet Service Groups in Policies
    • IPv6 Support (UI)
    • Enable dynamic connector address used in policies  6.2.1
    • Traffic shaping profile additional priorities  6.2.1
    • Ingress traffic shaping  6.2.1
  • Forward Error Correction
  • Represent Multiple IPsec Tunnels as a Single Interface
  • Dual VPN Tunnel Wizard
  • BGP Additional Path Support
  • SLA Logging
  • Internet Service Customization
  • SLA Monitoring via REST API
  • SD-WAN support for ADVPN  6.2.1
  • Factory default health checks  6.2.1
  • BGP route-map and selective rules  6.2.1
  • Per-link controls for policy and SLA checks  6.2.1
  • Weighted random early detection support  6.2.1
• Multi-Cloud
  • AWS Extensions
    • Cross AZ High Availability support
    • Autoscale with Transit GW support  6.2.1
    • FortiCare-generated license adoption for AWS PAYG variant  6.2.2
  • Azure extensions
    • SR-IOV support  6.2.1
    • Support HA between AZs  6.2.1
    • Azure SDN connector support for non-VM resources  6.2.3
  • Google Cloud Platform (GCP) Extensions
    • HA Between Zones
    • Auto Scaling
  • Oracle Cloud Extensions
    • IAM Authentication
    • Paravirtualized Mode Support
    • Native Mode Support for OCI
    • High Availability between Availability Domains
  • AliCloud Extensions
    • Auto Scaling
    • Active-Passive HA support between Availability Zones  6.2.1
    • Active-Passive HA support on AliCloud  6.2.1
  • Support up to 18 Interfaces
  • OpenStack — Network Service Header (NSH) Chaining Support
  • Physical Function (PF) SR-IOV Driver Support
  • FortiMeter Extensions
    • FortiMeter - Microsoft Hyper-V Instances
    • FortiMeter - Fallback to Public FortiGuard
  • CPU only licensing for private clouds  6.2.2
  • SDN connector for NSX-T manager  6.2.2
• Automation and Dev-Ops
  • Trigger - FortiAnalyzer Event Handler
  • Trigger - FortiCloud-based IOC
  • Action - NSX Quarantine
  • Action - CLI Script
  • Action - Azure Function
  • Action - Google Cloud Function
  • Action - AliCloud Function
  • Action - Webhook Extensions
• Advanced Threats
  • Flow-based Inspection
    • Web Filtering
    • Inspection Mode Per Policy
    • Statistics
    • Protocol Port Enforcement
  • IP Reputation Filtering
  • URL Certificate Blacklist
  • Global IP Address Information Database
  • Antivirus Performance Improvements
    • CIFS Support
  • IPv6
    • Combined IPv4 and IPv6 Policy
    • FortiGuard DNS Filter
  • File Filtering for Web and Email Filter Profiles
  • Move Botnet C&C into IPS Profile
  • NGFW policy mode  6.2.1
  • NGFW policy mode application default service  6.2.1
  • Adding CPU affinity for URL filters  6.2.1
  • SSL offload/sandwich mode  6.2.1
• IOT & OT
  • MAC Address-Based Policies
  • Device Summary and Filtering
  • Manage device objects  6.2.1
• SOC Adoption
  • Topology View — Consolidated Risk
  • FortiView — Subnet Filters
  • FortiView Dashboards and Widgets
  • FortiView Object Names
  • FortiView Top Sources Usability
  • FortiManager Cloud Service
  • FortiAnalyzer Cloud Service
  • Extend log timestamp to nanoseconds  6.2.1
• Compliance
  • FortiSandbox Cloud Region Selection
  • FortiGate-VM Unique Certificate
  • Run a File System Check Automatically
  • Password change prompt on first login  6.2.1
• UX / Usability
  • SAML SSO
  • Logging - Session versus Attack Direction
  • Internet Service Improvement
  • Application Control Profile GUI Improvements
  • Authentication Policy Extensions
  • Workspace Mode
  • Extend Policy/Route Check to Policy Routing
  • Address Group - Exclusions
  • Automatic Address Creation for Attached Networks
  • Centralized Web Filtering Statistics
  • Traffic Shaping GUI Update
  • Unified Login for FortiCare and FortiGate Cloud
  • Split-Task VDOM Mode
  • System Events default dashboard  6.2.2
  • Advanced policy options in the GUI  6.2.2
  • Support for wildcard FQDN addresses in firewall policy  6.2.2
  • Traffic class ID configuration updates  6.2.2
  • Security Fabric topology improvements  6.2.2
  • Adding IPsec aggregate members in the GUI  6.2.3
• Other
  • Extend Interface Failure Detection to Aggregate Interfaces
  • Source & Destination UUID Logging
  • DNS - Multiple Domain List
  • DNS - Latency Info
  • DNS - Add DNS Translation to DNS Profile
  • Multiple FortiAnalyzer (or Syslog) Per VDOM
  • Web Proxy
    • Transparent Web Proxy Forwarding
    • Multiple Dynamic Header Count
    • Restricted SaaS Access (0365, G-Suite, Dropbox)
    • Syntax update for Microsoft compatibility  6.2.1
    • Support FortiSandbox Cloud  6.2.1
  • Protocols
    • TLS 1.3 Support
    • SMBv2 Support (SSL VPN)
    • PTPv2
    • Telnet Disabled Option
    • SHA-1 Authentication Support (for NTPv4)
    • DNS over TLS
    • LLDP Reception
    • Direct IP Support for LTE/4G
    • OSPFv3 neighbor authentication  6.2.1
    • LACP support on entry-level E-series devices  6.2.1
    • TLS 1.3 proxy support  6.2.1
    • GTPv2 in policy  6.2.1
    • FortiGate Cloud / FDN communication through an explicit proxy  6.2.1
    • Transceiver information on FortiOS GUI  6.2.1
    • LACP support on entry-level devices  6.2.2
    • Ignore AUTH TLS command for DLP  6.2.2
    • LACP support on entry-level devices  6.2.4
  • Recognize AnyCast Address in Geo-IP Blocking
  • GTP in Asymmetric Routing
  • Firewall - Allow to Customize Default Service
  • Firewall - Anti-Replay Option Per-Policy
  • NTLM Extensions
  • Option to Disable Stateful SCTP Inspection
  • HA Failover Condition - SSD Failure
  • Option to Fragment IP Packets Before IPSec Encapsulation
  • DHCP Relay Agent Information Option
  • VLAN Inside VXLAN
  • Controlling return path with auxiliary session
  • Disable all cloud communication
  • Custom SIP RTP Port Range Support
  • Custom Service Max Value Increase
  • FortiCarrier License Activation
  • GUI Alert on Login to VMX Security Nodes
  • Event Log Subtype for FortiExtender
  • Decouple FortiSandbox Cloud from FortiCloud
  • FortiGate Cloud
  • SNMP OID for Log Failed to Send
  • FortiGuard Distribution of Updated Apple Certificates (for token push notifications)
  • Active Directory Recursive Search Option
  • Web proxy global settings
  • Device detection label changes  6.2.1
  • Device detection changes when upgrading to 6.2  6.2.1
  • Flow versus proxy policy improvement  6.2.1
  • Virtual switch support for FortiGate 300E series  6.2.2
  • IPsec VPN wizard hub-and-spoke ADVPN support  6.2.2
  • FortiGuard communication over port 443 with HTTPS  6.2.2
  • IPv6 FortiGuard connections  6.2.2
  • SSH file scan  6.2.2
  • FortiGuard third Party SSL validation and Anycast support  6.2.2
  • FortiClient EMS Cloud support  6.2.2
  • Remove FortiGate Cloud standalone reference  6.2.3
  • Dynamic address support for SSL VPN policies  6.2.3
  • GUI support for FortiAP U431F and U433F  6.2.3
  • Support for wtp profiles 6.2.4
  • Retrieve client OS information from FortiAP 6.2.4
  • FortinetOne renamed FortiCloud 6.2.5
• Change Log