Fortinet Document Library
Version:
6.4.0
6.2.0
Table of Contents
Expanding Fabric Family
Telemetry Integration - New FTNT Products
Telemetry Integration - AWS Cloud Segments
SAML SSO for Fabric Devices
Split-Task VDOM Support
Dynamic Policy - Fabric Devices
Fabric Member Synchronization
Simplify FortiAnalyzer Pairing
FortiSandbox
FortiClient EMS
Security Rating
Security Rating - Extend Checks to FortiAnalyzer
Security Rating – Historical Rating Dashboard Widget
Comprehensive Report Extensions
Endpoint
Dynamic Policy – FortiClient EMS (Connector)
Captive Portal for Compliance Failure
FortiToken Cloud
EMS fabric connector GUI support 6.2.1
FortiToken Cloud two-factor authentication in the GUI 6.2.1
Wireless
WiFi Location Map
Monitor and Suppress Phishing SSID
WiFi QoS Enhancement
Airtime Fairness
Extended Details on AP Drill Down
Troubleshooting – Extended Logging
Override WiFi Certificates (from GUI)
Wireless MAC Filter Updates
Change SSID to VDOM Object
Direct SNMP Monitoring
Supporting WPA3 on FAP 6.2.1
Switching
FortiLink Setup
Voice VLAN Auto-Assignment
Dynamic VLAN 'Name' Assignment from RADIUS Attribute
Netflow / IPFIX Support
QoS Assignment and Rate Limiting for Quarantined VLANs
Persistent MAC Learning (Sticky MAC)
Split Port Mode for QSFP ports
Virtual Switch Extensions
MSTI Support
FortiLink Auto Network Configuration Policy
FortiLink MCLAG configuration in GUI
FortiLink Network Sniffer Extension
Leverage SAML to switch between Security Fabric FortiGates 6.2.1
Leverage LLDP to Simplify Security Fabric Negotiation
Configuring single-sign-on in the Security Fabric 6.2.2
FSSO dynamic address subtype 6.2.2
VMware NSX-T managed by FortiManager 6.2.2
Fabric Connectors
Multiple Concurrent SDN/Cloud Connectors
Filter Lookup Improvement for SDN Connectors
Obtain full user information through the MS Exchange connector
Cloud Connector - AliCloud
Cloud Connector - AWS - IAM Support
SDN Connector - VMware ESXi
Kubernetes (K8s)
Private Cloud K8s Connector
AWS Kubernetes (EKS) Connector
Azure Kubernetes (AKS) Connector
GCP Kubernetes (GKE) Connector
Oracle Kubernetes (OKE) Connector
SDN Connector - Azure Stack
SDN Connector - OpenStack Domain Filter
Endpoint Connector - Cisco pxGrid
External Block List (Threat Feed) – Policy
External Block List (Threat Feed) - File Hashes
External Block List (Threat Feed) - Authentication
Connector GUI Organization
Use active directory objects directly in policy 6.2.1
Endpoint connector - FortiNAC 6.2.1
LDAP connector to get more user information from user login IDs 6.2.1
OCI SDN connector 6.2.1
ClearPass endpoint connector via FortiManager 6.2.2
ClearPass integration for dynamic address objects 6.2.2
Symantec endpoint connector 6.2.2
Support for wildcard SDN connectors in filter configurations 6.2.3
FortiClient EMS Cloud support 6.2.3
SD-WAN
Overlay Controller VPN (OCVPN)
Hub-and-Spoke Support
ADVPN Support
Multiple VPN Support
OCVPN free license updates 6.2.1
SD-WAN Bandwidth Monitoring Service
Rule Definition Improvements
Load Balancing Per-Rule
Interface Cost
DSCP Matching (Shaping)
Traffic Shaping Schedules
Application Groups in Policies
Internet Service Groups in Policies
IPv6 Support (UI)
Enable dynamic connector address used in policies 6.2.1
Traffic shaping profile additional priorities 6.2.1
Ingress traffic shaping 6.2.1
Forward Error Correction
Represent Multiple IPsec Tunnels as a Single Interface
Dual VPN Tunnel Wizard
BGP Additional Path Support
SLA Logging
Internet Service Customization
SLA Monitoring via REST API
SD-WAN support for ADVPN 6.2.1
Factory default health checks 6.2.1
BGP route-map and selective rules 6.2.1
Per-link controls for policy and SLA checks 6.2.1
Weighted random early detection support 6.2.1
Multi-Cloud
AWS Extensions
Cross AZ High Availability Support
Autoscale with Transit GW support 6.2.1
FortiCare-generated license adoption for AWS PAYG variant 6.2.2
Azure extensions
SR-IOV support 6.2.1
Support HA between AZs 6.2.1
Azure SDN connector support for non-VM resources 6.2.3
Google Cloud Platform (GCP) Extensions
HA Between Zones
Auto Scaling
Oracle Cloud Extensions
IAM Authentication
Paravirtualized Mode Support
Native Mode Support for OCI
High Availability Between Availability Domains
AliCloud Extensions
Auto Scaling
Active-Passive HA support between Availability Zones 6.2.1
Active-Passive HA support on AliCloud 6.2.1
Support up to 18 Interfaces
OpenStack — Network Service Header (NSH) Chaining Support
Physical Function (PF) SR-IOV Driver Support
FortiMeter Extensions
FortiMeter - Microsoft Hyper-V Instances
FortiMeter - Fallback to Public FortiGuard
CPU only licensing for private clouds 6.2.2
SDN connector for NSX-T manager 6.2.2
Automation and Dev-Ops
Trigger - FortiAnalyzer Event Handler
Trigger - FortiCloud-based IOC
Action - NSX Quarantine
Action - CLI Script
Action - Azure Function
Action - Google Cloud Function
Action - AliCloud Function
Action - Webhook Extensions
Advanced Threats
Flow-based Inspection
Web Filtering
Inspection Mode Per Policy
Statistics
Protocol Port Enforcement
IP Reputation Filtering
URL Certificate Blacklist
Global IP Address Information Database
Antivirus Performance Improvements
CIFS Support
IPv6
Combined IPv4 and IPv6 Policy
FortiGuard DNS Filter
File Filtering for Web and Email Filter Profiles
Move Botnet C&C into IPS Profile
NGFW policy mode 6.2.1
NGFW policy mode application default service 6.2.1
Adding CPU affinity for URL filters 6.2.1
SSL offload/sandwich mode 6.2.1
IOT & OT
MAC Address-Based Policies
Device Summary and Filtering
Manage device objects 6.2.1
SOC Adoption
Topology View — Consolidated Risk
FortiView — Subnet Filters
FortiView Dashboards and Widgets
FortiView Object Names
FortiView Top Sources Usability
FortiManager Cloud Service
FortiAnalyzer Cloud Service
Extend log timestamp to nanoseconds 6.2.1
Compliance
FortiSandbox Cloud Region Selection
FortiGate-VM Unique Certificate
Run a File System Check Automatically
Password change prompt on first login 6.2.1
UX / Usability
SAML SSO
Logging - Session versus Attack Direction
Internet Service Improvement
Application Control Profile GUI Improvements
Authentication Policy Extensions
Workspace Mode
Extend Policy/Route Check to Policy Routing
Address Group - Exclusions
Automatic Address Creation for Attached Networks
Centralized Web Filtering Statistics
Traffic Shaping GUI Update
Unified Login for FortiCare and FortiGate Cloud
Split-Task VDOM Mode
System Events default dashboard 6.2.2
Advanced policy options in the GUI 6.2.2
Support for wildcard FQDN addresses in firewall policy 6.2.2
Traffic class ID configuration updates 6.2.2
Security Fabric topology improvements 6.2.2
Adding IPsec aggregate members in the GUI 6.2.3
Other
Extend Interface Failure Detection to Aggregate Interfaces
Source & Destination UUID Logging
DNS - Multiple Domain List
DNS - Latency Info
DNS - Add DNS Translation to DNS Profile
Multiple FortiAnalyzer (or Syslog) Per VDOM
Web Proxy
Transparent Web Proxy Forwarding
Multiple Dynamic Header Count
Restricted SaaS Access (0365, G-Suite, Dropbox)
Syntax update for Microsoft compatibility 6.2.1
Support FortiSandbox Cloud 6.2.1
Protocols
TLS 1.3 Support
SMBv2 Support (SSL VPN)
PTPv2 (Slave Mode)
Telnet Disabled Option
SHA-1 Authentication Support (for NTPv4)
DNS over TLS
LLDP Reception
Direct IP Support for LTE/4G
OSPFv3 neighbor authentication 6.2.1
LACP support on entry-level E-series devices 6.2.1
TLS 1.3 proxy support 6.2.1
GTPv2 in policy 6.2.1
FortiGate Cloud / FDN communication through an explicit proxy 6.2.1
Transceiver information on FortiOS GUI 6.2.1
LACP support on entry-level devices 6.2.2
Ignore AUTH TLS command for DLP 6.2.2
Recognize AnyCast Address in Geo-IP Blocking
GTP in Asymmetric Routing
Firewall - Allow to Customize Default Service
Firewall - Anti-Replay Option Per-Policy
NTLM Extensions
Option to Disable Stateful SCTP Inspection
HA Failover Condition - SSD Failure
Option to Fragment IP Packets Before IPSec Encapsulation
DHCP Relay Agent Information Option
VLAN Inside VXLAN
ECMP Acceleration in NAT Mode
Disable all cloud communication
Custom SIP RTP Port Range Support
Custom Service Max Value Increase
FortiCarrier License Activation
GUI Alert on Login to VMX Security Nodes
Event Log Subtype for FortiExtender
Decouple FortiSandbox Cloud from FortiCloud
FortiGate Cloud
SNMP OID for Log Failed to Send
FortiGuard Distribution of Updated Apple Certificates (for token push notifications)
Active Directory Recursive Search Option
Web proxy global settings
Device detection label changes 6.2.1
Device detection changes when upgrading to 6.2 6.2.1
Flow versus proxy policy improvement 6.2.1
Virtual switch support for FortiGate 300E series 6.2.2
IPsec VPN wizard hub-and-spoke ADVPN support 6.2.2
FortiGuard communication over port 443 with HTTPS 6.2.2
IPv6 FortiGuard connections 6.2.2
SSH file scan 6.2.2
FortiGuard third Party SSL validation and Anycast support 6.2.2
FortiClient EMS Cloud support 6.2.2
Remove FortiGate Cloud standalone reference 6.2.3
Dynamic address support for SSL VPN policies 6.2.3
GUI support for FortiAP U431F and U433F 6.2.3
Change Log
Home
FortiGate / FortiOS 6.2.0
New Features
New Features
Expanding Fabric Family
Telemetry Integration - New FTNT Products
Telemetry Integration - AWS Cloud Segments
SAML SSO for Fabric Devices
Split-Task VDOM Support
Dynamic Policy - Fabric Devices
Fabric Member Synchronization
Simplify FortiAnalyzer Pairing
FortiSandbox
FortiClient EMS
Security Rating
Security Rating - Extend Checks to FortiAnalyzer
Security Rating – Historical Rating Dashboard Widget
Comprehensive Report Extensions
Endpoint
Dynamic Policy – FortiClient EMS (Connector)
Captive Portal for Compliance Failure
FortiToken Cloud
EMS fabric connector GUI support 6.2.1
FortiToken Cloud two-factor authentication in the GUI 6.2.1
Wireless
WiFi Location Map
Monitor and Suppress Phishing SSID
WiFi QoS Enhancement
Airtime Fairness
Extended Details on AP Drill Down
Troubleshooting – Extended Logging
Override WiFi Certificates (from GUI)
Wireless MAC Filter Updates
Change SSID to VDOM Object
Direct SNMP Monitoring
Supporting WPA3 on FAP 6.2.1
Switching
FortiLink Setup
Voice VLAN Auto-Assignment
Dynamic VLAN 'Name' Assignment from RADIUS Attribute
Netflow / IPFIX Support
QoS Assignment and Rate Limiting for Quarantined VLANs
Persistent MAC Learning (Sticky MAC)
Split Port Mode for QSFP ports
Virtual Switch Extensions
MSTI Support
FortiLink Auto Network Configuration Policy
FortiLink MCLAG configuration in GUI
FortiLink Network Sniffer Extension
Leverage SAML to switch between Security Fabric FortiGates 6.2.1
Leverage LLDP to Simplify Security Fabric Negotiation
Configuring single-sign-on in the Security Fabric 6.2.2
FSSO dynamic address subtype 6.2.2
VMware NSX-T managed by FortiManager 6.2.2
Fabric Connectors
Multiple Concurrent SDN/Cloud Connectors
Filter Lookup Improvement for SDN Connectors
Obtain full user information through the MS Exchange connector
Cloud Connector - AliCloud
Cloud Connector - AWS - IAM Support
SDN Connector - VMware ESXi
Kubernetes (K8s)
Private Cloud K8s Connector
AWS Kubernetes (EKS) Connector
Azure Kubernetes (AKS) Connector
GCP Kubernetes (GKE) Connector
Oracle Kubernetes (OKE) Connector
SDN Connector - Azure Stack
SDN Connector - OpenStack Domain Filter
Endpoint Connector - Cisco pxGrid
External Block List (Threat Feed) – Policy
External Block List (Threat Feed) - File Hashes
External Block List (Threat Feed) - Authentication
Connector GUI Organization
Use active directory objects directly in policy 6.2.1
Endpoint connector - FortiNAC 6.2.1
LDAP connector to get more user information from user login IDs 6.2.1
OCI SDN connector 6.2.1
ClearPass endpoint connector via FortiManager 6.2.2
ClearPass integration for dynamic address objects 6.2.2
Symantec endpoint connector 6.2.2
Support for wildcard SDN connectors in filter configurations 6.2.3
FortiClient EMS Cloud support 6.2.3
SD-WAN
Overlay Controller VPN (OCVPN)
Hub-and-Spoke Support
ADVPN Support
Multiple VPN Support
OCVPN free license updates 6.2.1
SD-WAN Bandwidth Monitoring Service
Rule Definition Improvements
Load Balancing Per-Rule
Interface Cost
DSCP Matching (Shaping)
Traffic Shaping Schedules
Application Groups in Policies
Internet Service Groups in Policies
IPv6 Support (UI)
Enable dynamic connector address used in policies 6.2.1
Traffic shaping profile additional priorities 6.2.1
Ingress traffic shaping 6.2.1
Forward Error Correction
Represent Multiple IPsec Tunnels as a Single Interface
Dual VPN Tunnel Wizard
BGP Additional Path Support
SLA Logging
Internet Service Customization
SLA Monitoring via REST API
SD-WAN support for ADVPN 6.2.1
Factory default health checks 6.2.1
BGP route-map and selective rules 6.2.1
Per-link controls for policy and SLA checks 6.2.1
Weighted random early detection support 6.2.1
Multi-Cloud
AWS Extensions
Cross AZ High Availability Support
Autoscale with Transit GW support 6.2.1
FortiCare-generated license adoption for AWS PAYG variant 6.2.2
Azure extensions
SR-IOV support 6.2.1
Support HA between AZs 6.2.1
Azure SDN connector support for non-VM resources 6.2.3
Google Cloud Platform (GCP) Extensions
HA Between Zones
Auto Scaling
Oracle Cloud Extensions
IAM Authentication
Paravirtualized Mode Support
Native Mode Support for OCI
High Availability Between Availability Domains
AliCloud Extensions
Auto Scaling
Active-Passive HA support between Availability Zones 6.2.1
Active-Passive HA support on AliCloud 6.2.1
Support up to 18 Interfaces
OpenStack — Network Service Header (NSH) Chaining Support
Physical Function (PF) SR-IOV Driver Support
FortiMeter Extensions
FortiMeter - Microsoft Hyper-V Instances
FortiMeter - Fallback to Public FortiGuard
CPU only licensing for private clouds 6.2.2
SDN connector for NSX-T manager 6.2.2
Automation and Dev-Ops
Trigger - FortiAnalyzer Event Handler
Trigger - FortiCloud-based IOC
Action - NSX Quarantine
Action - CLI Script
Action - Azure Function
Action - Google Cloud Function
Action - AliCloud Function
Action - Webhook Extensions
Advanced Threats
Flow-based Inspection
Web Filtering
Inspection Mode Per Policy
Statistics
Protocol Port Enforcement
IP Reputation Filtering
URL Certificate Blacklist
Global IP Address Information Database
Antivirus Performance Improvements
CIFS Support
IPv6
Combined IPv4 and IPv6 Policy
FortiGuard DNS Filter
File Filtering for Web and Email Filter Profiles
Move Botnet C&C into IPS Profile
NGFW policy mode 6.2.1
NGFW policy mode application default service 6.2.1
Adding CPU affinity for URL filters 6.2.1
SSL offload/sandwich mode 6.2.1
IOT & OT
MAC Address-Based Policies
Device Summary and Filtering
Manage device objects 6.2.1
SOC Adoption
Topology View — Consolidated Risk
FortiView — Subnet Filters
FortiView Dashboards and Widgets
FortiView Object Names
FortiView Top Sources Usability
FortiManager Cloud Service
FortiAnalyzer Cloud Service
Extend log timestamp to nanoseconds 6.2.1
Compliance
FortiSandbox Cloud Region Selection
FortiGate-VM Unique Certificate
Run a File System Check Automatically
Password change prompt on first login 6.2.1
UX / Usability
SAML SSO
Logging - Session versus Attack Direction
Internet Service Improvement
Application Control Profile GUI Improvements
Authentication Policy Extensions
Workspace Mode
Extend Policy/Route Check to Policy Routing
Address Group - Exclusions
Automatic Address Creation for Attached Networks
Centralized Web Filtering Statistics
Traffic Shaping GUI Update
Unified Login for FortiCare and FortiGate Cloud
Split-Task VDOM Mode
System Events default dashboard 6.2.2
Advanced policy options in the GUI 6.2.2
Support for wildcard FQDN addresses in firewall policy 6.2.2
Traffic class ID configuration updates 6.2.2
Security Fabric topology improvements 6.2.2
Adding IPsec aggregate members in the GUI 6.2.3
Other
Extend Interface Failure Detection to Aggregate Interfaces
Source & Destination UUID Logging
DNS - Multiple Domain List
DNS - Latency Info
DNS - Add DNS Translation to DNS Profile
Multiple FortiAnalyzer (or Syslog) Per VDOM
Web Proxy
Transparent Web Proxy Forwarding
Multiple Dynamic Header Count
Restricted SaaS Access (0365, G-Suite, Dropbox)
Syntax update for Microsoft compatibility 6.2.1
Support FortiSandbox Cloud 6.2.1
Protocols
TLS 1.3 Support
SMBv2 Support (SSL VPN)
PTPv2 (Slave Mode)
Telnet Disabled Option
SHA-1 Authentication Support (for NTPv4)
DNS over TLS
LLDP Reception
Direct IP Support for LTE/4G
OSPFv3 neighbor authentication 6.2.1
LACP support on entry-level E-series devices 6.2.1
TLS 1.3 proxy support 6.2.1
GTPv2 in policy 6.2.1
FortiGate Cloud / FDN communication through an explicit proxy 6.2.1
Transceiver information on FortiOS GUI 6.2.1
LACP support on entry-level devices 6.2.2
Ignore AUTH TLS command for DLP 6.2.2
Recognize AnyCast Address in Geo-IP Blocking
GTP in Asymmetric Routing
Firewall - Allow to Customize Default Service
Firewall - Anti-Replay Option Per-Policy
NTLM Extensions
Option to Disable Stateful SCTP Inspection
HA Failover Condition - SSD Failure
Option to Fragment IP Packets Before IPSec Encapsulation
DHCP Relay Agent Information Option
VLAN Inside VXLAN
ECMP Acceleration in NAT Mode
Disable all cloud communication
Custom SIP RTP Port Range Support
Custom Service Max Value Increase
FortiCarrier License Activation
GUI Alert on Login to VMX Security Nodes
Event Log Subtype for FortiExtender
Decouple FortiSandbox Cloud from FortiCloud
FortiGate Cloud
SNMP OID for Log Failed to Send
FortiGuard Distribution of Updated Apple Certificates (for token push notifications)
Active Directory Recursive Search Option
Web proxy global settings
Device detection label changes 6.2.1
Device detection changes when upgrading to 6.2 6.2.1
Flow versus proxy policy improvement 6.2.1
Virtual switch support for FortiGate 300E series 6.2.2
IPsec VPN wizard hub-and-spoke ADVPN support 6.2.2
FortiGuard communication over port 443 with HTTPS 6.2.2
IPv6 FortiGuard connections 6.2.2
SSH file scan 6.2.2
FortiGuard third Party SSL validation and Anycast support 6.2.2
FortiClient EMS Cloud support 6.2.2
Remove FortiGate Cloud standalone reference 6.2.3
Dynamic address support for SSL VPN policies 6.2.3
GUI support for FortiAP U431F and U433F 6.2.3
Change Log
6.2.0
6.4.0
6.2.0
Download PDF
Copy Link
Compliance
This section lists the new features added to FortiOS for Compliance.
Compliance
This section lists the new features added to FortiOS for Compliance.
Link
PDF
