Whatʼs new in FortiOS 7.0.8

The following list contains new managed FortiSwitch features added in FortiOS 7.0.8.

• The commands for flooding IGMP reports and flooding multicast traffic on a specified managed switch interface have changed from:

  config switch-controller managed-switch

  edit <FortiSwitch_serial_number>

  config ports

  edit <port_name>

  set igmps-flood-reports {disable | enable}

  set igmps-flood-traffic {disable | enable}

  next

  end

  to:

  config switch-controller managed-switch

  edit <FortiSwitch_serial_number>

  config ports

  edit <port_name>

  set igmp-snooping-flood-reports {disable | enable}

  set mcast-snooping-flood-traffic {disable | enable}

  next

  end

  For example:

  config switch-controller managed-switch

  edit S524DF4K15000024

  config ports

  edit port3

  set igmp-snooping-flood-reports enable

  set mcast-snooping-flood-traffic enable

  next

  end

• A new test has been added to the FortiSwitch recommendations in the Security Fabric > Security Rating page to help optimize your network. The test checks the FortiSwitchOS version on the managed switches. If the FortiSwitchOS version is 7.0.0 or higher, FortiOS recommends using the strict tunnel mode, which enforces the use of strong encryption. If the managed switches are running an older firmware version, FortiOS recommends upgrading to FortiSwitchOS 7.0.0 or higher.

  To set the tunnel mode to strict in FortiOS:

  config switch-controller system

  set tunnel-mode strict

  end

• You can now use the FortiOS CLI to specify how often the managed FortiSwitch unit will send IGMP version-2 queries when the IGMP-snooping querier is configured:

  config switch-controller igmp-snooping

  set query-interval <10-1200>

  end

  By default, queries are sent every 125 seconds. The value for aging-time must be greater than the value for query-interval.

• You can now add software switch interfaces for the incoming and outgoing interfaces when you create a new IPv4 or IPv6 multicast policy by going to Policy & Objects > Multicast Policy and clicking Create New. The members must belong to an explicit intra-switch-policy switch interface.

• The FG-180xF and FG-260xF models can now manage 196 FortiSwitch units.