DOCUMENT LIBRARY

New Features

Home FortiGate / FortiOS 7.2.0 New Features

7.2.0

7.2.0

7.2.0

GUI

General usability enhancements

Security Fabric

Fabric settings	Automatic regional discovery for FortiSandbox Cloud Follow the upgrade path in a federated update Rename FortiAI to FortiNDR Register all HA members to FortiCare from the primary unit Remove support for Security Fabric loose pairing Allow FortiSwitch and FortiAP upgrade when the Security Fabric is disabled
Automation stitches	Add new automation triggers for event logs

Network

SD-WAN	Allow application category as an option for SD-WAN rule destination Add mean opinion score calculation and logging in performance SLA health checks Multiple members per SD-WAN neighbor configuration Duplication on-demand when SLAs in the configured service are matched SD-WAN in large scale deployments SD-WAN segmentation over a single overlay
General	Add NetFlow fields to identify class of service OSPF graceful restart on topology change OSPFv3 graceful restart for OSPF6 BFD for multihop path for BGP Configuring a FortiGate interface to act as an 802.1X supplicant Support 802.1X on virtual switch for certain NP6 platforms SNMP OIDs for port block allocations IP pool statistics Increase the number of VRFs per VDOM
IPv6	Configuring IPv4 over IPv6 DS-Lite service NAT46 and NAT64 for SIP ALG

System

General	Improve admin-restrict-local handling of multiple authentication servers Access control for SNMP based on the MIB-view and VDOM Backing up and restoring configuration files in YAML format Remove split-task VDOMs and add a new administrative VDOM type Introduce maturity firmware levels
High availability	VRRP on EMAC-VLAN interfaces Abbreviated TLS handshake after HA failover HA failover support for ZTNA proxy sessions Add warnings when upgrading an HA cluster that is out of synchronization Support up to 30 virtual clusters Optimized FGSP peer communication
FortiGuard	FDS-only ISDB package in firmware images Verifying and accepting signed AV and IPS packages

Policy & Objects

Zero Trust Network Access	ZTNA scalability support for up to 50 thousand concurrent endpoints Using the IP pool or client IP address in a ZTNA connection to backend servers
NGFW	Allow web filter category groups to be selected in NGFW policies Add option to set application default port as a service port Introduce learn mode in security policies in NGFW mode
Policies	Adding traffic shapers to multicast policies Add Policy change summary and Policy expiration to Workflow Management
Objects	Allow empty address groups Remove overlap check for VIPs

Security Profiles

Antivirus	FortiSandbox inline scanning
Web filter	Using the Websense Integrated Services Protocol in flow mode Inspecting HTTP3 traffic
IPS	IPS sensor entry filters Support full extended IPS database for CP9 models and slim extended database for other physical models
Others	Add email filters for block allow lists Enhance the DLP backend and configurations Add option to disable the FortiGuard IP address rating ICAP scanning with SCP and FTP

VPN

IPsec and SSL VPN

User & Authentication

Authentication

Secure Access

Wireless	Allow pre-authorization of a FortiAP by specifying a Wildcard Serial Number Disable dedicated scanning on FortiAP F-Series profiles Improve WiFi channel selection GUI Support Layer 3 roaming for tunnel mode Report wireless client app usage for clients connected to bridge mode SSIDs
Switch Controller	Automatic updating of the port list when switch split ports are changed Use wildcard serial numbers to pre-authorize FortiSwitch units Allow multiple managed FortiSwitch VLANs to be used in a software switch Allow a LAG on a FortiLink-enabled software switch Configure MAB reauthentication globally or locally Enhanced FortiSwitch Topology view Support dynamic discovery in FortiLink mode over a layer-3 network Configure flap guard through the switch controller Allow FortiSwitch console port login to be disabled Configure multiple flow-export collectors Enhanced FortiSwitch Ports page and Diagnostics and Tools pane Manage FortiSwitch units on VXLAN interfaces Add new FortiSwitch Clients page
NAC	Allow the configuration of NAC LAN segments in the GUI
FortiExtender	Allow FortiExtender to be managed and used in a non-root VDOM

Log & Report

Logging

Cloud

Public and private cloud

Operational Technology

GUI	Add OT asset visibility and network topology to Asset Identity Center page
System	Allow manual licensing for FortiGates in air-gap environments

Previous

Next

7.2.0

7.2.0

GUI

General usability enhancements

Security Fabric

Fabric settings	Automatic regional discovery for FortiSandbox Cloud Follow the upgrade path in a federated update Rename FortiAI to FortiNDR Register all HA members to FortiCare from the primary unit Remove support for Security Fabric loose pairing Allow FortiSwitch and FortiAP upgrade when the Security Fabric is disabled
Automation stitches	Add new automation triggers for event logs

Network

SD-WAN	Allow application category as an option for SD-WAN rule destination Add mean opinion score calculation and logging in performance SLA health checks Multiple members per SD-WAN neighbor configuration Duplication on-demand when SLAs in the configured service are matched SD-WAN in large scale deployments SD-WAN segmentation over a single overlay
General	Add NetFlow fields to identify class of service OSPF graceful restart on topology change OSPFv3 graceful restart for OSPF6 BFD for multihop path for BGP Configuring a FortiGate interface to act as an 802.1X supplicant Support 802.1X on virtual switch for certain NP6 platforms SNMP OIDs for port block allocations IP pool statistics Increase the number of VRFs per VDOM
IPv6	Configuring IPv4 over IPv6 DS-Lite service NAT46 and NAT64 for SIP ALG

System

General	Improve admin-restrict-local handling of multiple authentication servers Access control for SNMP based on the MIB-view and VDOM Backing up and restoring configuration files in YAML format Remove split-task VDOMs and add a new administrative VDOM type Introduce maturity firmware levels
High availability	VRRP on EMAC-VLAN interfaces Abbreviated TLS handshake after HA failover HA failover support for ZTNA proxy sessions Add warnings when upgrading an HA cluster that is out of synchronization Support up to 30 virtual clusters Optimized FGSP peer communication
FortiGuard	FDS-only ISDB package in firmware images Verifying and accepting signed AV and IPS packages

Policy & Objects

Zero Trust Network Access	ZTNA scalability support for up to 50 thousand concurrent endpoints Using the IP pool or client IP address in a ZTNA connection to backend servers
NGFW	Allow web filter category groups to be selected in NGFW policies Add option to set application default port as a service port Introduce learn mode in security policies in NGFW mode
Policies	Adding traffic shapers to multicast policies Add Policy change summary and Policy expiration to Workflow Management
Objects	Allow empty address groups Remove overlap check for VIPs

Security Profiles

Antivirus	FortiSandbox inline scanning
Web filter	Using the Websense Integrated Services Protocol in flow mode Inspecting HTTP3 traffic
IPS	IPS sensor entry filters Support full extended IPS database for CP9 models and slim extended database for other physical models
Others	Add email filters for block allow lists Enhance the DLP backend and configurations Add option to disable the FortiGuard IP address rating ICAP scanning with SCP and FTP

VPN

IPsec and SSL VPN

User & Authentication

Authentication

Secure Access

Wireless	Allow pre-authorization of a FortiAP by specifying a Wildcard Serial Number Disable dedicated scanning on FortiAP F-Series profiles Improve WiFi channel selection GUI Support Layer 3 roaming for tunnel mode Report wireless client app usage for clients connected to bridge mode SSIDs
Switch Controller	Automatic updating of the port list when switch split ports are changed Use wildcard serial numbers to pre-authorize FortiSwitch units Allow multiple managed FortiSwitch VLANs to be used in a software switch Allow a LAG on a FortiLink-enabled software switch Configure MAB reauthentication globally or locally Enhanced FortiSwitch Topology view Support dynamic discovery in FortiLink mode over a layer-3 network Configure flap guard through the switch controller Allow FortiSwitch console port login to be disabled Configure multiple flow-export collectors Enhanced FortiSwitch Ports page and Diagnostics and Tools pane Manage FortiSwitch units on VXLAN interfaces Add new FortiSwitch Clients page
NAC	Allow the configuration of NAC LAN segments in the GUI
FortiExtender	Allow FortiExtender to be managed and used in a non-root VDOM

Log & Report

Logging

Cloud

Public and private cloud

Operational Technology

GUI	Add OT asset visibility and network topology to Asset Identity Center page
System	Allow manual licensing for FortiGates in air-gap environments

Previous

Next