FortiOS is the operating system of FortiGate firewalls and the foundation of the Security Fabric. Features, release cycle, what is new in 8.0 and best practices.
FortiOS is the operating system that runs FortiGate firewalls, whether they are hardware appliances, virtual machines or cloud deployments. It brings together in a single piece of software the functions of routing, next-generation firewalling, VPN, SD-WAN and zero trust access. In March 2026, Fortinet introduced FortiOS 8.0, which is currently the most recent major version of the system.
Fortinet has chosen to rely on a single operating system across the entire FortiGate range, from small branch office units to data center chassis, as well as on virtual machines and cloud instances. For an administrator, this means that the concepts, the interface and the command line remain the same regardless of the model being managed.
FortiOS is also the central point of the Security Fabric, the architecture that connects Fortinet products to one another. From a FortiGate, you can manage FortiAP Wi-Fi access points and FortiSwitch switches, or share information with FortiAnalyzer, FortiSandbox and other components.
The many capabilities of FortiOS can be grouped into a few main blocks:
Several security functions rely on FortiGuard subscriptions to stay up to date. On most physical models, certain tasks are accelerated by specialized processors designed by Fortinet, which has a direct impact on how the appliance should be sized.
Announced on March 10, 2026 at the Accelerate event, FortiOS 8.0 focuses on several areas:
As with any major version, caution is in order before adopting it: read the release notes, check the compatibility of your models and test before migrating a production environment. Many organizations therefore choose to remain on a more mature branch, such as 7.4 or 7.6, until the new branch has been proven in their own context.
FortiOS is exposed software, and it is often reachable directly from the internet. Several FortiOS vulnerabilities have been added to CISA's KEV catalog, which lists actively exploited flaws. A few essential practices should be applied:
In Morocco, these measures are part of the security requirements applicable to sensitive infrastructures under law 05-20 on cybersecurity, whose implementation is overseen by the DGSSI.
Administration is carried out through the web interface, the command line, or FortiManager for large fleets. Logging is generally centralized in FortiAnalyzer, which collects the logs from the various devices. A good command of the CLI remains essential for troubleshooting: session diagnostics, packet capture, and analysis of routing or VPN negotiation.
Administering FortiOS requires a solid networking foundation and a detailed understanding of its internal mechanisms. The following training paths are the most direct:
FortiOS is the software core of Fortinet devices and the common thread across the entire FortiGate range. Version 8.0 extends its scope to AI control and post-quantum cryptography, but the foundation remains the same: a well-managed configuration, closely followed updates and trained administrators.