The end of support for FortiOS 7.2, scheduled for September 30, 2026, is leading network administrators to prepare for the necessary changes. The update to FortiOS 7.4 can be a viable transition in certain environments, mainly for those still dependent on SSL VPN. However, this change also offers the opportunity to reassess whether it is feasible to continue with FortiGate solutions or if it is time to explore open-source software-based alternatives and open technologies, such as OPNsense, pfSense, OpenWrt, IPsec, OpenVPN or WireGuard.
Administrators face the need for careful migration, given that FortiOS 7.6.3 will eliminate SSL VPN tunnel mode support. Fortinet recommends migration to IPsec, highlighting that it is essential to review Security Fabric, hardware compatibility, and the official roadmap before any update. The situation requires a meticulous approach, since migration should be treated as an architectural change and not just a firmware update.
A FortiGate performs critical functions, such as firewall, NAT, VPN, and authentication, and each of these functionalities must be evaluated individually. The direct update may disable existing SSL VPN configurations, and Fortinet warns that the lack of support for this connection mode starting from version 7.6.3 can severely impact operations. Administrators have at least three paths: continue with the Fortinet update, disconnect the VPN and keep it in a separate solution, or explore open-source software firewalls.
The last option, although attractive, requires rigorous testing to ensure the new system meets the specific demands of the organization. There is also an opportunity to reassess the network architecture, considering technologies like IPsec or popular alternatives like OpenVPN and WireGuard, which have their advantages and disadvantages. The decision on how to proceed with migration can significantly impact not only security but also operational efficiency in the networks where the devices are deployed.
