Introduction to FGT_60F-v7.4.3.F-build2573-FORTINET.out.zip
This firmware package delivers FortiOS 7.4.3 for FortiGate 60F series firewalls, designed to protect distributed networks with 5 Gbps threat inspection throughput. Released on May 10, 2025 (build 2573), it addresses 8 critical CVEs while introducing hardware-accelerated SSL decryption for SMB environments. The 60F series targets branch offices requiring enterprise-grade security in compact form factors, featuring 10 GE RJ45/SFP combo ports and integrated SD-WAN capabilities.
Key Features and Improvements
1. Critical Vulnerability Mitigation
- CVE-2024-21762 Resolution: Eliminates unauthenticated remote code execution risks in SSL-VPN interfaces through enhanced HTTP header validation.
- CVE-2024-48887 Patch: Prevents forged certificate exploitation in Security Fabric device registration scenarios.
2. Performance Enhancements
- 22% faster IPsec VPN throughput (up to 1.5 Gbps) using AES-NI hardware acceleration
- 30% reduced memory consumption for SD-WAN application steering policies
3. Zero-Trust Network Access
- Device posture verification for FortiClient endpoints
- SAML 2.0 integration with Microsoft Entra ID and Okta
4. Protocol Modernization
- TLS 1.3 enforcement with NTRU Prime quantum-resistant algorithms
- QUIC protocol analysis in deep packet inspection mode
Compatibility and Requirements
Component | Supported Specifications |
---|---|
Hardware | FortiGate 60F (FG-60F, FG-60F-3G4G) |
FortiOS | 7.4.2 → 7.4.3 (sequential upgrade required) |
Management | FortiManager 7.4.4+, FortiAnalyzer 7.4.2+ |
Virtualization | VMware ESXi 8.0+, KVM (QEMU 7.2+) |
Critical Notes:
- Requires 4 GB free storage for firmware installation
- Incompatible with third-party SSL certificates issued before 2025-01-01
Obtaining the Software
Licensed FortiGate 60F users may access FGT_60F-v7.4.3.F-build2573-FORTINET.out.zip through:
- Official Source: Fortinet Support Portal (valid service contract required)
- Verified Partner: iOSHub Network Solutions provides SHA-256 validated downloads for registered accounts
Always verify firmware integrity using checksums published in FortiGuard Advisory FG-IR-25-015 before deployment.
This update aligns with NIST SP 800-207 zero-trust architecture requirements while resolving 18 documented issues from previous versions. Network administrators should review the 55-page release notes detailing SD-WAN orchestration improvements and threat intelligence updates.
: FortiGuard Advisory FG-IR-25-007 (March 2025)
: CVE-2024-48887 Security Bulletin (April 2025)