FortiOS 4.

0 MR2 Software
Part of the FortiGate Multi-Threat Security System
Frequently Asked Questions for Fortinet’s FortiOS 4.0 MR2 Software

Software Questions
Q: What is FortiOS Software?
A: FortiOS is the system software that powers all FortiGate platforms. It is based on a proprietary security-hardened
operating system that forms the basis for all of the multi-threat security functions provided by FortiGate systems.
Moreover, FortiOS provides the capability to manage FortiGate platforms either via a secure web-based user
interface or a command line user interface.

Q: What is new with respect to the latest version of FortiOS Software?

A: FortiOS 4.0 MR2 is the latest version of FortiOS software and introduces many new security and networking
technologies that are not available in previous releases. The major new technologies in FortiOS 4.0 MR2 include:

 A New Web-based GUI: The web-based GUI has been redesigned to provide a simpler and more efficient
user interface to improve the user’s experience and workflow.
 More Granular Firewall Policies: Protection profiles have been replaced with individual UTM features
settings, which can be selected directly from the firewall policy.
 Flow-based Antivirus Scanning: Introduction of a new flow-based antivirus scanning engine enables users
to perform high-speed and non-proxying malware inspection, free of file size limitations.
 New “Extreme” antivirus dataset: In addition to our standard and extended antivirus databases, we’re now
introducing our most comprehensive antivirus database for the FortiGate platform. This dataset is for
environments where security is the primary consideration and more closely matches the antivirus databases
found in endpoint security products.
 Per-IP traffic shaping: New Per-IP traffic shaper enables monitoring and control of bandwidth consumption
on a per-IP address basis, ensuring granular control over network bandwidth.
 VoIP Security: Provides additional security for enterprises using an IP-based PBX, Unified Communication
Products, and/or SIP trunking environments to lower costs by consolidating network and security
infrastructure.
 New Vulnerability Management Integration: Vulnerability assessment of endpoints can now be performed
directly from the FortiGate platform.
 New Local Report Generation Module: Provides the ability to generate graphical reports directly from the
FortiGate web-based GUI.
 FORTINET – FortiOS 4.0 MR2 Software FAQ PAGE 2

Additional features added to FortiOS 4.0 MR2 include:

 Dynamic resource allocation for different UTM features to maximize performance of the system.
 A new “Monitor” function in the firewall policy.
 WCCP Client support.
 Explicit Web Proxy support, including support for Citrix environments.
 Improvements in disk management and usage – support DLP archive, PCAP and some control over log
storage and WAN optimization storage space.
 Support for the new FortiMobile SSL-VPN client for iPhone and iPod Touch.
 Web filtering quotas allow administrator to allocate time base quotas base on the URL categories.
 Configuration revision control provides records to system configuration file and firmware changes for
backup and auditing purposes.
 Enhanced Networking Protocol Support: FortiOS now provides sFlow information, also new internetworking
features such as IS-IS routing protocol and VRRP redundant routing support.

Please review the FortiOS 4.0 brochure, technical documentation, and software release notes for complete
coverage of the many new additions and enhancements in the FortiOS 4.0 MR2 software release.

Q: What will it cost to upgrade to FortiOS 4.0 MR2 Software?

A: Upgrading to FortiOS 4.0 MR2 software is free of charge to FortiGate customers with a valid FortiCare maintenance
contract. FortiCare users can download the latest version of FortiOS 4.0 from http://support.fortinet.com. If you do
not have a valid FortiCare maintenance contract, contact your Fortinet partner or sales person about acquiring the
appropriate FortiCare maintenance package for your needs.

Q: Will the current FortiOS 4.0 MR1 configuration be compatible with FortiOS 4.0 MR2?
A: While Fortinet has made every effort to maintain configuration compatibility, it is highly recommended to consult the
upgrade guide and release notes (found in the Fortinet support portal) for known issues. We also strongly
recommend backing up the FortiGate system configuration before any software upgrade. FortiOS 4.0 MR2 software
supports upgrading from any previous FortiOS 4.0 release, with the configuration file being converted to the new
format during the upgrade process.

Q: Will FortiManager and FortiAnalyzer platforms support FortiGate running FortiOS 4.0 MR2?
A: FortiManager and FortiAnalyzer 4.0 MR2 firmware is required to support FortiGate product running FortiOS 4.0
MR2. FortiManager and FortiAnalyzer 4.0 MR2 is schedule to be release at the same time as the FortiOS 4.0 MR2.

Q: Will all FortiGate models support FortiOS 4.0 MR2?

A: Most of the FortiGate models will support the upgrade to the FortiOS 4.0 MR2 software. Some earlier generations of
product will not be able to support FortiOS 4.0 MR2 due to hardware requirements. See FortiGate compatibility
table in the Hardware Section of this FAQ for a list of products that support FortiOS 4.0 MR2 software. You can also
refer to the FortiOS 4.0 MR2 release notes for the hardware compatibility list.

Q: Will FortiOS 3.0 be discontinued?

A: There is no plan to discontinue FortiOS 3.0 at this time. End users will be informed when the life cycle milestones of
FortiOS 3.0 have been determined. Life Cycle information for Fortinet hardware and software products can be found
on the Product Life Cycle Information page of the Fortinet support portal
(https://support.fortinet.com/EndUser/ProductLifeCycle.aspx).

Confidential - Not for External Distribution

Fortinet and Authorized Partners Only
 FORTINET – FortiOS 4.0 MR2 Software FAQ PAGE 3

Hardware Questions

Q: Will all FortiGate models support all of the new features in FortiOS 4.0 MR2 software?
A: While most of the new features in FortiOS 4.0 MR2 are supported by most FortiGate models, some new features
demand specific hardware requirements and will not be supported. The following table details which platforms
support the more demanding features: the extreme AV dataset, the flow-based antivirus engine, and the new
vulnerability assessment function:

FortiOS 4.0 MR2 New Features Compatibility Table

Standard AV Extended AV Extreme AV Flow-based FortiGuard Vulnerability

Dataset Dataset Dataset AV Dataset Management Support
FortiGate-30B Yes No No No Yes *
FortiWiFi-30B Yes No No No Yes *
FortiGate-50B Yes Yes No No Yes *
FortiWiFi-50B Yes Yes No No Yes *
FortiGate-51B Yes Yes No No Yes
FortiGate-60B Yes Yes No No No
FortiWiFi-60B Yes Yes No No No
FortiGate-80C Yes Yes No Yes Yes
FortiGate Voice-80C Yes Yes No Yes Yes
FortiWiFi Voice-80CS Yes Yes No Yes Yes
FortiGate-80CM Yes Yes No Yes Yes
FortiWiFi-80CM Yes Yes No Yes Yes
FortiWiFi-81CM Yes Yes No Yes Yes
FortiGate-82C Yes Yes No No Yes
FortiGate-110C Yes Yes No No Yes
FortiGate-111C Yes Yes No No Yes
FortiGate-200B Yes Yes No Yes Yes
FortiGate-200B-POE Yes Yes No Yes Yes
FortiGate-224B Yes Yes No No No
FortiGate-310B Yes Yes No No Yes
FortiGate-310B-DC Yes Yes No No Yes
FortiGate-311B Yes Yes No No Yes
FortiGate-620B Yes Yes Yes Yes Yes
FortiGate-620B-DC Yes Yes Yes Yes Yes
FortiGate-1000A Yes Yes No No Yes
FortiGate-1000A-FA2 Yes Yes No No Yes
FortiGate-1240B Yes Yes Yes Yes Yes
FortiGate-1240B-DC Yes Yes Yes Yes Yes
FortiGate-3016B Yes Yes No No Yes
FortiGate-3600A Yes Yes No No Yes
FortiGate-3600A-DC Yes Yes No No Yes
FortiGate-3810A Yes Yes No No Yes
FortiGate-3810A-DC Yes Yes No No Yes
FortiGate-5001A-DW Yes Yes No No Yes
FortiGate-5001A-SW Yes Yes No No Yes
FortiGate-5005-FA2 Yes Yes No No Yes
FortiGate-ONE
(ProCurve) Yes Yes Yes Yes Yes

IMPORTANT: Be sure to reference the Fortinet support site for the latest in feature/platform compatibility information.
Confidential - Not for External Distribution
Fortinet and Authorized Partners Only
 FORTINET – FortiOS 4.0 MR2 Software FAQ PAGE 4

* Supported of Vulnerability Management will be added to the FortiOS MR2 Patch 2 (4.2.2) release.

Q: Will FortiOS 4.0 MR2 support the same 3G-broadband cards supported in previous releases?
A: The FortiOS 4.0 MR2 release notes outline the 3G-broadband cards that have been verified by the Fortinet QA
team.

Security Subscription Services

Q: What subscription services are available with FortiOS 4.0 MR2?
A: All standard FortiGuard™ security subscription services are available with FortiOS 4.0 software. Security
subscription services are inclusive of the FortiGuard Antivirus, IPS, Web Filtering, Antispam, and the new
Vulnerability Management services. Subscription bundles are available and are more affordable over buying each
service separately. No user licensing or user restrictions exist on any FortiGate model. Note the new Vulnerability
Management Subscription service is not supported on all FortiGate models. Please refer to the FortiOS MR2 new
feature compatibility table within this document or the FortiOS 4.0 MR2 Release Notes for more information.

Q: How often are these subscription services updated?

A: Each FortiGuard service regularly publishes content updates in order to keep FortiGate units up-to-date against
current and evolving cyber threats. Antivirus and Intrusion Prevention System services have the ability to
automatically push updates to registered and configured units within minutes of becoming available, 24 hours a
day. The real-time services include Antispam and Web Filtering services and are constantly upgraded databases
that maintain the highest levels of accuracy.

Q: Are all the existing FortiGuard subscription service compatible with FortiOS 4.0 MR2?
A: The existing FortiGuard subscription service is compatible with FortiOS 4.0 MR2. Therefore, any existing
FortiGuard service contract will be carried over after the FortiGate upgrade to FortiOS 4.0 MR2.

Q: How does Fortinet subscription service response time compare to the industry?
A: Fortinet's FortiGuard subscription services provide Fortinet customers with around the clock and around the world
updates. Researchers at FortiGuard Labs in six countries assure that threats are immediately addressed and
signature updates are released with unparalleled speed. With the FortiGuard Premier Signature Service,
customers can submit requests for custom virus or IPS signatures. This service includes a service-level agreement
with a contractual warranty of response time. All FortiGuard Subscription Services including the Premier Signature
Service are described in the datasheet available from the Service and Support portion of the Fortinet web site.

Copyright 2010 Fortinet, Inc. All rights reserved.

No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any
form or by any means, electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of
Fortinet Inc. Products mentioned in this document are trademarks or registered trademarks of their respective holders. Although
Fortinet has attempted to provide accurate information in these materials, Fortinet assumes no legal responsibility for the accuracy
or completeness of the information. More specific information is available on request from Fortinet. Please note that Fortinet's
product information does not constitute or contain any guarantee, warranty, or legally binding representation, unless expressly
identified as such in a duly signed writing.
FORTIOS-FAQ-R4-201007

Confidential - Not for External Distribution

Fortinet and Authorized Partners Only