8.0.0

8.0.0

GUI

General usability enhancements

FortiView

Graphical display for application performance monitoring analytics

Network

General	IPv6 Multicast Routing Enhancement with BSR Support Added BGP neighbor naming support Increased AS path item for BGP route maps IPv6 PCP support for DNAT46 in NAT64 deployments Customizable CoS marking for locally generated ARP packets Firewall address support for IPAM rules Graceful BGP shutdown TCP congestion control enhancement with BBR Session helper statistics Enhanced EVPN support for VXLAN Anycast gateway and type-5 routing Enhanced PIM support for IPv6 across all VRFs GPON support for FortiGates with SFP/SFP+ ports 802.1X, MAB, dynamic VLAN, and address object support for software switch Dynamic BGP learning of ISDB reputation IPs Enhanced multicast session key for virtual wire pair Next-hop self-support for VPNv4 and VPNv6 route reflectors
IPv6	IPv6 Link-local configuration enhancement IPv6 proxy address and address group object support
Explicit and transparent proxy	Secure explicit proxy with client certificate blocklist enforcement

SD-WAN

Overlays and underlays

Performance SLA

SD-WAN speed test scheduling improvements

Policy and objects

Policies	Upstream SSL/TLS support for virtual load-balancing servers
Objects	Custom tags for addresses, policies, and dynamic tag address groups

Zero Trust Network Access

General	ZTNA configuration simplification ZTNA service connector
Security posture and EMS connectors	Support tags in dual stack IPv4/IPv6 ZTNA policies

Security Profiles

Others	File filter warning action for HTTP downloads Local URL filtering with custom FortiGuard categories New classification framework for application signatures and FortiView support Support for hybrid PQC SSL deep inspection in proxy mode Enhanced UTM protection with WebSocket traffic inspection FortiGuard-free rating for local and external categories Expanded CASB SaaS application database
Protecting LLM and GenAI	Application control support for generative AI Agentic AI protocol support in FortiOS

VPN

IPsec and Agentless VPN

User & Authentication

Authentication

Enable secure LDAP connection by default in the GUI

LAN Edge

Wireless

Switch Controller

System

General	Configurable timeout for log file system check Administrator access hardening SCP file transfers VM license grace period monitoring enhancement Configurable FQDN Host header for FortiGate proxy communication Additional commands supported before device registration Legal third party disclosure panel Per VDOM replacement message customization Configuration revisions and logout backup default changes FortiAI assistant and CLI Code Lab Enhancements to required upgrade when firmware license is invalid or device is EOES
High availability	IPv6 support for in-band management IP Support IPv6 multicast route synchronization in HA FGSP source IP and interface selection HA monitoring support for software switch member interfaces FGCP and FGSP synchronizes full-cone expectation sessions when session-pickup-expectation enabled Enhanced FGCP monitoring with interface group awareness GUI support for HA actions, health status, and config diff FGSP synchronizes firewall-authenticated users HA role shown in CLI prompt
SNMP	SNMP support for new IP pool statistics OIDs
FortiGuard	Enhanced FortiGuard server selection and load balancing FortiGuard rating server prioritization improvements
API	API support to manage firmware for FortiGate extended devices

Security Fabric

Fabric settings and connectors	Cloud-based Fabric Feed synchronization Label-based sandbox exemptions for sensitive data control Simultaneous FortiSandbox Cloud and on-premise integration
External SDN connectors	Support for Cisco ACI External EPG Subnets in Direct Connector Negation support in ACI direct connector address filters

Log & Report

Logging

Cloud

Public and private cloud

AWS SDN connector EKS filtering support

FortiOS Carrier

FortiASIC

Hardware acceleration	Improvements for NP7-offloaded GRE tunnels NP7 offloading of TCP and UDP sessions denied by firewall policies to reduce CPU usage NP7 support for traffic shaping based on dynamic RADIUS VSAs
Hyperscale firewall	New SNMP counters to support CGNAT IP pool monitoring Hyperscale HA hardware session synchronization improves support for PBR sessions Hyperscale CGNAT EIF session timer options

Operational Technology

System

8.0.0

GUI

Network

SD-WAN

Policy and objects

Zero Trust Network Access

Security Profiles

VPN

User & Authentication

LAN Edge

System

Security Fabric

Log & Report

Cloud

FortiOS Carrier

FortiASIC

Operational Technology

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

New Features

8.0.0

GUI

Network

SD-WAN

Policy and objects

Zero Trust Network Access

Security Profiles

VPN

User & Authentication

LAN Edge