Fortinet Lifecycle & Upgrade Services

Fortinet platforms and services we cover

ENCSE is a Fortinet partner in India. That page covers the product portfolio and procurement; this one covers lifecycle services on equipment you already run.

FortiOS upgrade path and behaviour changes

FortiOS enforces a supported upgrade path, and moving between distant versions requires intermediate hops rather than a single jump. Establishing that path for each device is a planning task, because it determines how many reboots the window contains and therefore how long the window needs to be.

Behaviour changes between major FortiOS versions warrant particular attention. Policy handling, SSL inspection defaults, security-profile behaviour and interface configuration have all changed materially across recent major versions, and a configuration that converts cleanly can still enforce differently afterwards. Reviewing release notes for behaviour changes between your current and target version is a standard part of our planning, because the failures it prevents are the ones that appear as unexplained application issues days later.

Post-upgrade licence state is the third recurring item. FortiGuard subscriptions and support entitlement need verifying after the change — some version transitions require re-registration, and a firewall running without current threat intelligence is a security regression that produces no alarm.

Fortinet tools we make available

Where our Fortinet lifecycle work typically starts

• A FortiOS advisory has been published and the exposure across the estate needs establishing quickly.
• FortiGate devices are several major versions behind and the upgrade path needs planning rather than attempting in one jump.
• Support or FortiGuard subscriptions have lapsed or are approaching expiry across a multi-device estate.
• FortiGate hardware is approaching end of support and a refresh needs costing and scheduling.
• An audit or VAPT has flagged FortiGate configuration weaknesses requiring hardening remediation.

Frequently asked questions

Can you upgrade FortiOS across multiple major versions?

Yes, following the supported upgrade path. Multi-version jumps require intermediate hops, each with its own reboot, so the window has to be sized for the full sequence rather than for a single upgrade. We establish the exact path per device during assessment so the window is scoped accurately.

Can a FortiGate HA cluster be upgraded without downtime?

In most cases the impact can be minimised by sequencing the upgrade across cluster members with validation between. Some major-version transitions do not support mixed versions in a cluster even briefly and require a short outage. Which case applies depends on your current and target versions, and the assessment establishes it before the window is agreed.

What happens to FortiGuard subscriptions after an upgrade?

They normally persist, but verification is essential — some version transitions require re-registration, and a FortiGate running without current threat intelligence looks entirely healthy while providing materially less protection. Post-upgrade licence and subscription validation is a standard item on our checklist.

My FortiGate is end-of-support. What are my options?

You can install the final released version, but no further fixes will come, so any advisory published after that date remains open permanently. The realistic options are replacement or accepting a growing exposure. Our FortiGate EOL checker establishes your position, and which FortiGate helps size a replacement.

Do you handle FortiGate licence renewals?

Yes. Support and FortiGuard subscription renewal is a service we provide directly — see Fortinet renewal India. Renewal matters beyond the subscription itself, because active entitlement is what permits downloading the software needed to close a security advisory.

Related services

• Fortinet Partner India
• Firewall Upgrade Services
• FortiGate EOL Checker
• Network Security Patch Management
• Request an Upgrade Assessment