Action Required Before May 11, 2026
FortiGate units still on FortiOS 7.4 will have firmware-auto-update forcibly enabled when FortiOS 7.4 reaches End of Engineering Support (EOES). Upgrading to 7.6 before this date keeps you in control.
There is an upcoming change in how FortiGate firewalls handle firmware upgrades, tied to the End of Engineering Support (EOES) of FortiOS 7.4 on May 11th, 2026.
What Happens on May 11, 2026?
As FortiOS 7.4 reaches EOES, if you have not already updated to version 7.6, your FortiGate appliance will automatically enable firmware-auto-update. Once this kicks in, the device will update itself whenever a new firmware release becomes available.
Critically, this auto-update cannot be disabled once the FortiOS version has reached EOES — unless the unit is managed by a FortiManager, or is part of a FortiGate Security Fabric.
"This could create service-impacting events as well as adding some risk to networks using FortiGate firewall units that are in active production."
Why Does This Matter?
Unplanned Downtime
An automatic firmware upgrade can reboot your firewall during business hours, causing unexpected network outages.
Compatibility Risks
A new firmware version may introduce changes that affect existing VPN tunnels, policies, or third-party integrations.
Loss of Control
Once auto-update is forced on, you can no longer choose your upgrade timing without FortiManager or Security Fabric.
The Fix Is Simple
Upgrading to 7.6 before May 11 lets you keep auto-update disabled, since 7.6 is not currently in EOES.
What You Should Do
- Upgrade your FortiGate to FortiOS 7.6 before May 11, 2026.
- Once on 7.6, verify that auto-firmware-update is disabled in your FortiGate settings.
- If you use FortiManager or are part of a Security Fabric, ensure your management configuration is correctly in place.
- Test your upgrade in a maintenance window to avoid unplanned disruption.
- Contact MAX IT Services if you need guidance on planning or executing the upgrade.
Exceptions: Who Is Not Affected?
FortiGate units that are managed by a FortiManager, or that are members of a FortiGate Security Fabric, can still control the auto-update behaviour even after EOES is reached. If your deployment falls into one of these categories, you have more flexibility — but it is still strongly recommended to upgrade to 7.6 to stay on a supported branch.
Fortinet Official Documentation
For full technical details on this change, you can read Fortinet's official documentation covering automatic firmware upgrades for FortiGate appliances with invalid support contracts or that have reached EOES.
Read Fortinet DocumentationNeed Help? We Are Here.
If you are unsure how this change impacts your network, or if you need help planning and executing the upgrade to FortiOS 7.6, do not hesitate to reach out to us. Our team has hands-on experience with FortiGate deployments across the Ottawa-Gatineau region and can help you navigate this transition smoothly and without service disruption.
Ready to Act Before May 11?
Get in touch with our team for a quick assessment and upgrade plan tailored to your environment.