Ensure your endpoints are running a compatible version (generally 7.0.x or higher) to avoid ZTNA or VPN disconnects.
Download a full configuration backup (including scripts/local certs) before hitting the upgrade button.
One of the primary drivers for moving to 7.0.9 was the mitigation of known . FortiOS 7.0.9 includes patches for various CVEs related to: SSL-VPN vulnerabilities. Privilege escalation within the CLI.
Check the "Known Issues" section of the 7.0.9 release notes. If your environment relies on a specific feature currently listed as buggy, you may need to wait for a later patch.
Addressal of issues where the wad process (proxy daemon) consumed excessive CPU, which previously led to "Conserve Mode" in high-traffic environments.
After upgrading, monitor the diag sys top command to ensure memory utilization remains within healthy parameters.
Optimization of the web-based management interface, particularly when viewing large firewall policy sets or logs. 3. Critical Security Considerations
Path traversal issues that could allow unauthorized file access.