7.4.2

GUI

General usability enhancements

Optimize policy and objects pages and dialogs 7.4.2 Indicate Special Technical Support builds 7.4.2

Network

General

BGP incorporates the advanced security measures of TCP Authentication Option (TCP-AO) 7.4.2 Allow multiple sFlow collectors 7.4.2 Support BGP graceful restart helper-only mode 7.4.2 Support for LAN extension VDOM simplifications 7.4.2 Allow multiple Netflow collectors 7.4.2 Enhance port-level control for STP and 802.1x authentication 7.4.2

SD-WAN

Overlays and underlays

IPv6 support for SD-WAN segmentation over a single overlay 7.4.2 SD-WAN hub and spoke speed test improvements 7.4.2 ADVPN 2.0 edge discovery and path management 7.4.2

Policy and objects

Policies	Support IPS inspection for multicast UDP traffic 7.4.2 Optimize virtual patching on the local-in interface 7.4.2
Protocol options	Stripping the X-Forwarded-For value in the HTTP header 7.4.2

Zero Trust Network Access

General	Condense ZTNA server mapping configurations 7.4.2 Introduce Fabric integration with FortiGSLB 7.4.2
Tags and EMS connectors	Add the Any and All options back for security posture tags in the GUI 7.4.2 Rename ZTNA Tag to Security Posture Tag in the GUI 7.4.2

Security Profiles

Web filter	Support Punycode encoding for the url and hostname fields in flow inspection logs 7.4.2
IPS	Support Diameter protocol inspection on the FortiGate 7.4.2
Virtual patching	Improve visibility of OT vulnerabilities and virtual patching signatures 7.4.2
Others	Enhance the video filter profile with a new level of customization and control 7.4.2 Enhancements to data loss prevention (DLP) 7.4.2

VPN

IPsec and SSL VPN

Support IPsec tunnel to change names 7.4.2 Encapsulate ESP packets within TCP headers 7.4.2 IPsec key retrieval with a QKD system using the ETSI standardized API 7.4.2 Support for autoconnect to IPsec VPN using Microsoft Entra ID 7.4.2

LAN Edge

Wireless

Add support for SAE-PK generation 7.4.2 Support RADIUS accounting interim update on roaming for WPA Enterprise security 7.4.2 Improve Bonjour profile provisioning and redundancy 7.4.2 GUI support for WPA3 security mode on Client mode FortiWiFi units 7.4.2 Support WPA3 options when the FortiAP radio mode is set to SAM 7.4.2 Add automated reboot functionality for FortiAPs 7.4.2 Support individual control of 802.11k and 802.11v protocols 7.4.2 Support external antennas in select FortiAP models 7.4.2 Support Hitless Rolling AP upgrade 7.4.2 Support third-party antennas in select FortiAP models 7.4.2 Improve CAPWAP stability over NAT 7.4.2

Switch Controller

Support FortiSwitch management using HTTPS 7.4.2 Set the priority for dynamic or egress VLAN assignment 7.4.2 Specify how RADIUS request attributes are formatted 7.4.2

System

General	Separate the SSHD host key from the administration server certificate 7.4.2 FortiOS REST API enhances FortiManager interaction with FortiExtender 7.4.2 CLI system permissions 7.4.2 Memory usage reduced on FortiGate models with 2 GB RAM 7.4.2 Prevent firmware upgrade depending on the current firmware license's expiration date 7.4.2
High availability	Enhance IPv6 VRRP state control 7.4.2
SNMP	Add SNMP trap for memory usage on FortiGates 7.4.2 Add SNMP trap for PSU power restore 7.4.2

Security Fabric

Asset Identity Center

Configure Purdue Levels for Fabric devices 7.4.2

Log & Report

Logging

Introduce new log fields for long-live sessions 7.4.2

Cloud

Public and private cloud

GCP support for C3A and C3D machine type 7.4.2 Add FortiFlex GUI option 7.4.2 AliCloud support for c7, c7a, and g5ne instance families 7.4.2 AliCloud support change route table with IPv4 gateway for HA 7.4.2 AWS SDN Connector support for alternate resources 7.4.2 Integrate FortiGate Azure vWAN solution with Azure Monitor to capture health metrics 7.4.2 Customizing the FortiFlex license token activation retry parameters 7.4.2