Is your FortiGate end of life?

From Fortinet's published product life cycle data and hardware end-of-life notices. We bake the dates into this tool when we refresh it rather than fetching live, and we link Fortinet's official life-cycle page under every result so you can double-check. If a model isn't in our dataset it usually means Fortinet hasn't announced dates for it.

End of order is the last day the hardware can be bought new; the firewall usually keeps working and receiving updates for about five years afterwards. End of support is the one that matters for security: after that date there are no more firmware releases, FortiGuard updates or Fortinet support. Running a firewall past end of support means every newly discovered vulnerability stays open.

It will keep passing traffic, but it no longer receives firmware or FortiGuard security updates, and firewall vulnerabilities are among the most actively exploited on the internet. It's also a straight failure for Cyber Essentials, which requires unsupported devices to be removed or segregated. Planning the replacement on your timetable is far cheaper than doing it after an incident.

Honestly, it depends. Staying with Fortinet keeps a full next-generation firewall: deep packet inspection, mature SD-WAN and the FortiGuard security services, at the cost of annual subscriptions that often rival the hardware price. Palo Alto Networks is the premium option, also subscription based, and usually costs more. UniFi has no mandatory licences and covers routing, VLANs, VPN and IDS/IPS very well for most smaller businesses. We deploy and support all three, so we'll give you a straight comparison for your estate rather than a sales pitch for any of them.

This is the option we'd encourage you to look at seriously. SASE (secure access service edge) moves the firewall's job into the cloud: zero-trust access, web filtering and traffic inspection delivered as a service to every user and every site, in the office or working from home. Instead of buying another edge box that will itself go end of life in a few years, the protection becomes a service. FortiSASE keeps you in the Fortinet ecosystem and Prisma Access is Palo Alto's equivalent. We design, deploy and support both, and for hybrid-working, multi-site businesses a zero-trust SASE approach is usually our recommendation at refresh time.

An audit of the current config: interfaces, policies, NAT, VPNs and any SD-WAN. Then a like-for-like design on the new platform, whether that's a current FortiGate, a Palo Alto or UniFi. We stage the new firewall alongside the old one, migrate and test out of hours, and keep a tested rollback. Most single sites are done in an evening with no working-hours downtime.

Yes. We handle the audit, the recommendation, procurement, configuration, installation and the ongoing 24×7 monitoring and support afterwards, whether you stay with Fortinet, step up to Palo Alto, move to UniFi or go to SASE. If you'd rather not deal with firewalls at all, that's what we're here for.