Automatic regional discovery for FortiSandbox Cloud

Follow the upgrade path in a federated update

Rename FortiAI to FortiNDR

Register all HA members to FortiCare from the primary unit

Remove support for Security Fabric loose pairing

Allow FortiSwitch and FortiAP upgrade when the Security Fabric is disabled

Allow application category as an option for SD-WAN rule destination

Add mean opinion score calculation and logging in performance SLA health checks

Multiple members per SD-WAN neighbor configuration

Duplication on-demand when SLAs in the configured service are matched

SD-WAN in large scale deployments

SD-WAN segmentation over a single overlay

Add NetFlow fields to identify class of service

OSPF graceful restart on topology change

OSPFv3 graceful restart for OSPF6

BFD for multihop path for BGP

Configuring a FortiGate interface to act as an 802.1X supplicant

Support 802.1X on virtual switch for certain NP6 platforms

SNMP OIDs for port block allocations IP pool statistics

Increase the number of VRFs per VDOM

Improve admin-restrict-local handling of multiple authentication servers

Access control for SNMP based on the MIB-view and VDOM

Backing up and restoring configuration files in YAML format

Remove split-task VDOMs and add a new administrative VDOM type

Introduce maturity firmware levels

VRRP on EMAC-VLAN interfaces

Abbreviated TLS handshake after HA failover

HA failover support for ZTNA proxy sessions

Add warnings when upgrading an HA cluster that is out of synchronization

Support up to 30 virtual clusters

ZTNA scalability support for up to 50 thousand concurrent endpoints

Using the IP pool or client IP address in a ZTNA connection to backend servers

Allow web filter category groups to be selected in NGFW policies

Add option to set application default port as a service port

Introduce learn mode in security policies in NGFW mode

Adding traffic shapers to multicast policies

Add Policy change summary and Policy expiration to Workflow Management

FortiSandbox inline scanning

Using the Websense Integrated Services Protocol in flow mode

Inspecting HTTP3 traffic

IPS sensor entry filters

Support full extended IPS database for CP9 models and slim extended database for other physical models

Allow pre-authorization of a FortiAP by specifying a Wildcard Serial Number

Disable dedicated scanning on FortiAP F-Series profiles

Improve WiFi channel selection GUI

Support Layer 3 roaming for tunnel mode

Report wireless client app usage for clients connected to bridge mode SSIDs

Automatic updating of the port list when switch split ports are changed

Use wildcard serial numbers to pre-authorize FortiSwitch units

Allow multiple managed FortiSwitch VLANs to be used in a software switch

Allow a LAG on a FortiLink-enabled software switch

Configure MAB reauthentication globally or locally

Enhanced FortiSwitch Topology view

Support dynamic discovery in FortiLink mode over a layer-3 network

Configure flap guard through the switch controller

Allow FortiSwitch console port login to be disabled

Configure multiple flow-export collectors

Enhanced FortiSwitch Ports page and Diagnostics and Tools pane

Manage FortiSwitch units on VXLAN interfaces

Add new FortiSwitch Clients page

Allow the configuration of NAC LAN segments in the GUI

Add OT asset visibility and network topology to Asset Identity Center page