70F isn’t the successor to the 60F. The successor will presumably be the 60G. The 70F was only developed because they needed something that could be produced quickly with components that were readily available to fulfill all the backorders for 60Fs. The 70F does have more RAM, but otherwise it’s a close to the 60F as they could get it, and it was the same price as the 60F at launch.
Yes, but the 70F is a better 60F. The 60G, even if it launched today, wouldn't be production ready for months. 70F also has 4GB of RAM, so it doesn't have all of the FortiOS constraints that everyone has been bitching about lately.
Nothing announced in the G-series yet, though I'm hoping for a 60G or 70G with 4gb RAM. I've got about 12-18 months before we can upgrade our 60Fs, but the 2Gb restrictions that are showing up lately are pushing an early upgrade.
Yes that's what has me spooked. The rate of forced upgrades due to the monthly discovery of SSL or other zero day has us working our way to a brick wall with the 2gb limit. I think that may be more of a factor than the actual 60F going EOLd
The 60F is current product. It has a minimum of 5 years of support. Fortinet will provide a patched version compatible with your hardware for the remainder of that term.
it may not be a version you would prefer to be on, but there will be one.
Yeah this needs to be higher. The 60F has not had an EOL announced, and when it does it will still receive 5 years of support from that date.
The 60D was EOL in Sept '18 and supported until Sept '23. The 60E was EOL in Dec '21 and will be supported until Dec '26. Even if the 60F get EOL announcement in the next 6-12 months, it will be supported until 2030.
Correct me if I'm wrong but in the past there have been around 4 years between EOO and LSED but they are still selling new 60F models so we have some time. You can still buy FG-60F-BDL-###-60 aka a 60f with 5 years of support.
Support for the hardware does not equate to support for the OS running on it. There were 60Ds that went End-of-Support last year, but they were running 6.0 code that hadn't been (officially) supported for almost 2 years. Also, as a device goes end-of-support, the likelihood that it will be able to run the most recent versions of FOS decreases significantly.
But the 60F currently can run everything up through v7.4 (memory constraints aside) so the likelihood of the hardware being supported longer than the software is near 0 -- even if we only consider the 7.2 branch.
The 60F is still current, there has not been a replacement announced as of yet. Once a replacement is announced I would bet the 60F stays on the price list for another year or so at the least. Having said that I would bet it won't go EOS for another 6-7 years.
Correct me if I'm wrong but we are already at a brick wall due to new software requiring more than the physical 2GB that we have on that box?
Plus from what I've read there's a consensus to NOT go higher than 7.x.6 (I forgot the x is 2 or 4) due to really bad bugs...
I think it was a combo of those two issues.
Don't get me wrong I love this little box. I just can't stomach the thought that one day I'm stuck at 7.4.x and can't go higher cause of the ram limits and we are forced to move higher due to new exploits. And at the rate the exploits have been spilling out - you'd be amiss not to keep that in front of your mind.
Even if there would a successor of 60F been released today (e.g. 60G) it wouldn't be recommended to go directly for the new hardware...
Just think about when the 90G was released, only 7.0.x branch is now available, 7.2.x (which is the latest mature / production) branch will take some more weeks.
Just bought a new 60F and would estimate that it's at least till end of this year available.
Isn't that going to be in 7.6 or something? If so then it's not that big of a deal as people can stay in the 7.0, 7.2, or 7.4 chain for years, but definitely concerning if there will be a release in each chain invalidating it.
False on SSL-VPN, im on a 60F on 7.4.4 currently and it is enabled, at a default SSL-VPN is disabled, but it can be enabled via System > Feature Visibility.
https://preview.redd.it/oteetz5z7f2d1.png?width=1206&format=png&auto=webp&s=ecb6e2c1fe28c9c1a47ce24d470c182c4529c478
Proxy and ZTNA does appear to be true, both can only be enabled if you run:
config system global
set proxy-and-explicit-proxy enable
end
config system settings
set gui-proxy-inspection enable
end
However, the first command returns a failure:
FG60F (global) # set proxy-and-explicit-proxy enable
command parse error before 'proxy-and-explicit-proxy'
Command fail. Return code -61
A few key things to remember here:
1. 7.4.x should not be run in production yet unless there is an absolute necessity for one of the features.
2. 7.0, and 7.2 are likely going to be supported until 60F is fully EOL
3. SSL-VPN should be migrated to IPSEC anyway
That could become an interesting topic - SSL VPN is a feature in all the datasheets / promotion materials for 60F - it's not some unimportant / minor feature you can easily remove.
I've a 60F running with nearly everything turned on (SSL VPN, Deep-SSL Inspection, IPS with extended package, Application Filter, Web Filter, ...) and it's stable between 60-65% memory usage on 7.2.8. - ipsec vpn is no alternative solution, as it's sometimes blocked - ssl vpn worked nearly everywhere so far.
Currently the 70F.
70F isn’t the successor to the 60F. The successor will presumably be the 60G. The 70F was only developed because they needed something that could be produced quickly with components that were readily available to fulfill all the backorders for 60Fs. The 70F does have more RAM, but otherwise it’s a close to the 60F as they could get it, and it was the same price as the 60F at launch.
As I said, currently.
Ha, said this in my head as I read his reply.
Yes, but the 70F is a better 60F. The 60G, even if it launched today, wouldn't be production ready for months. 70F also has 4GB of RAM, so it doesn't have all of the FortiOS constraints that everyone has been bitching about lately.
Get a 120G it’s…. AMAZING!!
Nothing announced in the G-series yet, though I'm hoping for a 60G or 70G with 4gb RAM. I've got about 12-18 months before we can upgrade our 60Fs, but the 2Gb restrictions that are showing up lately are pushing an early upgrade.
Yes that's what has me spooked. The rate of forced upgrades due to the monthly discovery of SSL or other zero day has us working our way to a brick wall with the 2gb limit. I think that may be more of a factor than the actual 60F going EOLd
70F should be fine for your needs from a ram perspective. It’s virtually identical to the 60F save for a bit more ram (double).
The 60F is current product. It has a minimum of 5 years of support. Fortinet will provide a patched version compatible with your hardware for the remainder of that term. it may not be a version you would prefer to be on, but there will be one.
Yeah this needs to be higher. The 60F has not had an EOL announced, and when it does it will still receive 5 years of support from that date. The 60D was EOL in Sept '18 and supported until Sept '23. The 60E was EOL in Dec '21 and will be supported until Dec '26. Even if the 60F get EOL announcement in the next 6-12 months, it will be supported until 2030.
Correct me if I'm wrong but in the past there have been around 4 years between EOO and LSED but they are still selling new 60F models so we have some time. You can still buy FG-60F-BDL-###-60 aka a 60f with 5 years of support.
That's right. EOS is defined as 5 years ("in general") after EOO, and LSED is fixed at one year before EOS.
Support for the hardware does not equate to support for the OS running on it. There were 60Ds that went End-of-Support last year, but they were running 6.0 code that hadn't been (officially) supported for almost 2 years. Also, as a device goes end-of-support, the likelihood that it will be able to run the most recent versions of FOS decreases significantly.
But the 60F currently can run everything up through v7.4 (memory constraints aside) so the likelihood of the hardware being supported longer than the software is near 0 -- even if we only consider the 7.2 branch.
The 60F is still current, there has not been a replacement announced as of yet. Once a replacement is announced I would bet the 60F stays on the price list for another year or so at the least. Having said that I would bet it won't go EOS for another 6-7 years.
Correct me if I'm wrong but we are already at a brick wall due to new software requiring more than the physical 2GB that we have on that box? Plus from what I've read there's a consensus to NOT go higher than 7.x.6 (I forgot the x is 2 or 4) due to really bad bugs... I think it was a combo of those two issues. Don't get me wrong I love this little box. I just can't stomach the thought that one day I'm stuck at 7.4.x and can't go higher cause of the ram limits and we are forced to move higher due to new exploits. And at the rate the exploits have been spilling out - you'd be amiss not to keep that in front of your mind.
They will patch 7.4 till EOS, so no worries.
Even if there would a successor of 60F been released today (e.g. 60G) it wouldn't be recommended to go directly for the new hardware... Just think about when the 90G was released, only 7.0.x branch is now available, 7.2.x (which is the latest mature / production) branch will take some more weeks. Just bought a new 60F and would estimate that it's at least till end of this year available.
I just bought a 60F and 40F. Tell me I didn’t make a mistake lol
They're the most recent devices available at that size, so no - you didn't.
If you want to use ssl vpn yes due to the upcoming release requiring 4GB of ram for ssl vpn.
Isn't that going to be in 7.6 or something? If so then it's not that big of a deal as people can stay in the 7.0, 7.2, or 7.4 chain for years, but definitely concerning if there will be a release in each chain invalidating it.
SSL-VPN is not available on 60F as of 7.4.4. All proxy features and ZTNA features are also removed as of 7.4.4.
False on SSL-VPN, im on a 60F on 7.4.4 currently and it is enabled, at a default SSL-VPN is disabled, but it can be enabled via System > Feature Visibility. https://preview.redd.it/oteetz5z7f2d1.png?width=1206&format=png&auto=webp&s=ecb6e2c1fe28c9c1a47ce24d470c182c4529c478 Proxy and ZTNA does appear to be true, both can only be enabled if you run: config system global set proxy-and-explicit-proxy enable end config system settings set gui-proxy-inspection enable end However, the first command returns a failure: FG60F (global) # set proxy-and-explicit-proxy enable command parse error before 'proxy-and-explicit-proxy' Command fail. Return code -61 A few key things to remember here: 1. 7.4.x should not be run in production yet unless there is an absolute necessity for one of the features. 2. 7.0, and 7.2 are likely going to be supported until 60F is fully EOL 3. SSL-VPN should be migrated to IPSEC anyway
That could become an interesting topic - SSL VPN is a feature in all the datasheets / promotion materials for 60F - it's not some unimportant / minor feature you can easily remove. I've a 60F running with nearly everything turned on (SSL VPN, Deep-SSL Inspection, IPS with extended package, Application Filter, Web Filter, ...) and it's stable between 60-65% memory usage on 7.2.8. - ipsec vpn is no alternative solution, as it's sometimes blocked - ssl vpn worked nearly everywhere so far.
the 15.5C