FortiGate End of Life Replacement
End-of-order and end-of-support dates, supported FortiOS branches and replacement options, checked against Fortinet’s product life cycle notices, release notes and Trade-Up matrix. A like-for-like swap is one fixed price for a firewall up to the 90-series class, plus hardware quoted by part number.
Short answer
View lifecycle dates and replacements for the models covered here ↓
Dates from Fortinet’s product life cycle notices, last reviewed ; Trade-Up replacements from the Q2 2026 matrix (sources below).
FortiGate 60E vs 60F
Fortinet’s notice of sets the FortiGate 60F and 61F end of order at , last renewal date and end of support . It is supported on FortiOS 8.0. The Wi-Fi models went first: the FortiWiFi 60F and 61F reached end of order .
Orderable until , with fewer features. The 60F is a 2 GB-RAM model. FortiOS 7.4.4 removed the ZTNA application proxy, proxy inspection mode and explicit proxy from it, and FortiOS 7.6 removed SSL VPN. The Q2 2026 matrix lists an exceptional Trade-Up transfer from the 60F to the FortiGate 70G; we confirm current eligibility before quoting.
End of order stops sales, not support. Planning a refresh? The free exposure check covers 60F units too: send your model list.
| Item | FortiGate 60E | FortiGate 60F |
|---|---|---|
| Lifecycle status | End of order ; end of support | End of order ; end of support |
| FortiOS | Last branch FortiOS 7.4; does not run 7.6 | Supported on FortiOS 8.0 |
| SSL VPN and proxy features | SSL VPN kept on FortiOS 7.4; proxy-related features removed starting in FortiOS 7.4.4, so review the configuration before upgrading | Proxy features removed in 7.4.4 and SSL VPN in 7.6 (2 GB-RAM model; see below) |
| Trade-Up replacement options | 60F, 70G | 70G (eligibility confirmed before quoting) |
| What to do | Plan the replacement before end of support | Keep or replace early; see the F-series section below. |
F-series models
The 40F has no end-of-order notice from Fortinet as of ; the 60F and 61F reach end of order on and end of support on . All three run FortiOS 8.0 and are 2 GB-RAM models, and Fortinet has removed some features from 2 GB models in newer FortiOS releases.
Proxy-based features were removed from 2 GB models: the ZTNA application proxy, proxy inspection mode, explicit and transparent proxy, and proxy-only profiles such as WAF and inline CASB. Fortinet’s list also includes the 60E, 80E and 90E. FortiOS 7.6.5 restored proxy inspection for email (SMTP, POP3, IMAP and NNTP) on 2 GB models.
SSL VPN was removed from the 40F, 60F/61F and FGR-60F, and tunnel mode was removed from all models in 7.6.3. See FortiGate SSL VPN migration.
Replace early if you require a removed proxy feature (proxy-mode web inspection, explicit proxy, WAF) or ZTNA application-proxy functionality, or if the unit is near its throughput limit with security services on. ZTNA tags for IP/MAC-based access control are supported from 7.6.3; check the exact feature and release before replacing hardware. Moving SSL VPN users to IPsec does not by itself need new hardware.
If flow-mode inspection and IPsec meet your needs and the unit has headroom, keep it patched and plan the refresh on your schedule.
Other models
Fortinet lists the 50G and 120G as current models with no end-of-order notice as of . The 100E is end of life: its end of support was . The table also covers the 61F, 71F and 81F, and the F-series models Fortinet stopped selling in 2026.
| Model | Status | Details |
|---|---|---|
| FortiGate 50G | Current model. No end-of-order notice as of . | Listed as a Trade-Up replacement for the 30E and 50E. Supported on FortiOS 8.0. |
| FortiGate 120G | Current model. No end-of-order notice as of . | Listed as a Trade-Up replacement for the 100E, 100EF, 101E and 100F. Supported on FortiOS 8.0. |
| FortiGate 100E | End of order ; end of support , already passed. | Last FortiOS branch 7.2; not in the FortiOS 8.0 supported-model list. Trade-Up replacement options: 90G, 120G. |
| FortiGate 61F | End of order ; end of support . | Trade-Up replacement options in the Q2 2026 matrix: 71F or 71G. Supported on FortiOS 8.0. A 2 GB-RAM model, like the 60F. |
| FortiGate 71F | No end-of-order notice as of . | Listed as a Trade-Up replacement for the 51E and 61E. |
| FortiGate 81F | No end-of-order notice as of . | Listed as a Trade-Up replacement for the 81E. |
| FortiGate 70F | End of order ; end of support . | Trade-Up replacement: the 70G. |
| FortiGate 100F / 101F | End of order ; end of support . | Trade-Up replacement: the 120G / 121G. |
| FortiGate 200F / 201F | End of order ; end of support . | Trade-Up replacement: the 200G / 201G. |
FortiGate End of Life Dates
End of life (EOL) covers two dates. End of order (EOO) is the last day Fortinet sells the model. End of support (EOS) is the last day Fortinet provides support or fixes for it. Replacement options are as Fortinet lists them, and we confirm eligibility per unit. Confirm your exact unit in Fortinet’s lifecycle tool before ordering.
| Model | End of order | End of support | Last FortiOS | Trade-Up replacement options | Quote |
|---|---|---|---|---|---|
| FortiGate 30E | FortiOS 6.2 | 40F, 30G, 50G | Quote a replacement for the FortiGate 30E | ||
| FortiGate 50E | FortiOS 6.2 | 60F, 50G, 70G | Quote a replacement for the FortiGate 50E | ||
| FortiGate 51E | FortiOS 6.2 | 61F, 71F, 51G, 71G | Quote a replacement for the FortiGate 51E | ||
| FortiGate 60E | FortiOS 7.4 | 60F, 70G | Quote a replacement for the FortiGate 60E | ||
| FortiGate 61E | (passed) | FortiOS 7.4 | 61F, 71F, 71G, 60F, 70G | Quote a replacement for the FortiGate 61E | |
| FortiGate 60E-POE | FortiOS 7.4 | 80F-POE | Quote a replacement for the FortiGate 60E-POE | ||
| FortiGate 80E | (passed) | FortiOS 7.4 | 80F, 90G | Quote a replacement for the FortiGate 80E | |
| FortiGate 81E | FortiOS 7.4 | 81F, 91G, 80F, 90G | Quote a replacement for the FortiGate 81E | ||
| FortiGate 90E | (passed) | FortiOS 7.4 | Not in current matrix | Quote a replacement for the FortiGate 90E | |
| FortiGate 100E | (passed) | FortiOS 7.2 | 90G, 120G | Quote a replacement for the FortiGate 100E | |
| FortiGate 101E | (passed) | FortiOS 7.2 | 120G, 121G | Quote a replacement for the FortiGate 101E | |
| FortiGate 40F | None published | None published | — (supported on 8.0) | 70G (exceptional transfer) | Quote a replacement for the FortiGate 40F |
| FortiGate 60F | — (supported on 8.0) | 70G | Quote a replacement for the FortiGate 60F | ||
| FortiGate 61F | — (supported on 8.0) | 71G, 71F | Quote a replacement for the FortiGate 61F | ||
| FortiWiFi 40F | — | FortiWiFi 50G or FortiWiFi 70G | Quote a replacement for the FortiWiFi 40F | ||
| FortiWiFi 60F | — (supported on 8.0) | FortiWiFi 70G | Quote a replacement for the FortiWiFi 60F | ||
| FortiWiFi 61F | — | FortiWiFi 71G | Quote a replacement for the FortiWiFi 61F | ||
| FortiGate 70F | — | 70G | Quote a replacement for the FortiGate 70F | ||
| FortiGate 100F / 101F | — | 120G, 121G | Quote a replacement for the FortiGate 100F / 101F | ||
| FortiGate 200F / 201F | — | 200G, 201G | Quote a replacement for the FortiGate 200F / 201F | ||
| FortiGate 50G | None published | None published | — (supported on 8.0) | Current model | |
| FortiGate 120G | None published | None published | — (supported on 8.0) | Current model |
The 90E is absent from the Q2 2026 Trade-Up matrix; its lifecycle dates are from Fortinet’s hardware life cycle notices. The 80E, 81E and 100E all list the 90G; part numbers are on the FortiGate 90G page. Dates are from Fortinet’s product life cycle notices (checked ); replacements from the Q2 2026 Trade-Up matrix. “None published”: no end-of-order notice from Fortinet as of . “Exceptional transfer”: the matrix allows a Trade-Up transfer from the 40F although it is not end of order. A dash means we have not verified the model’s final supported FortiOS branch.
Why End of Support Matters
An end-of-support firewall keeps passing traffic, so the risk is easy to miss.
Fortinet’s security-fix (PSIRT) policy applies to products that have not reached end of life. After hardware end of support, expect no further firmware or vulnerability fixes for that unit.
Older hardware stops at a FortiOS branch: 6.2 for the 30E and 50E, 7.2 for the 100E, 7.4 for the 60E, 80E and 90E. Once that branch leaves engineering support, Fortinet may release only critical and PSIRT fixes, at its discretion.
FortiCare and FortiGuard can’t be extended past end of support, and the last extension date is 12 months before it. Lapsed services mean stale threat intelligence and no path to open a support case.
From FortiOS 7.4.8 on the 7.4 branch, and from 7.6.4 on 7.6, a FortiGate without a valid Firmware & General Updates license, or past end of engineering support, schedules a required upgrade to the latest patch in its branch. It can’t be cancelled; how far it can be postponed depends on the release (7.6.6 allows repeated seven-day delays). Units managed by FortiManager or joined to a Security Fabric do not upgrade automatically.
FortiGate 60E
Its end of order was . Plan the FortiGate 60E replacement now so the cutover happens in a window you choose.
The Trade-Up matrix lists the 60F and 70G as eligible replacements. The 70G is the only current G-series model on that list. Fortinet’s reference list price is $1,562 for the appliance as of ; your quote confirms current pricing. Bundle pricing and part numbers are on the FortiGate 70G page, or size it in the sizing guide.
The 70G has no SSL VPN; Fortinet’s datasheet lists it as N/A. A 60E running SSL VPN needs a plan for IPsec or ZTNA before the swap. SSL VPN conversion is quoted after scoping your users, rules and applications. See FortiGate SSL VPN migration.
The like-for-like swap is $2,500. It covers config conversion and review, a pre-staged unit, one scheduled remote evening cutover, Trade-Up paperwork and as-built notes.
Free check
Send the models, quantities and any renewal dates you know. The first reply is free: which units lose support and when, the replacement for each, and the swap price. Send your model list.
How a Replacement Works
Model, serial, FortiOS version, licenses, HA, VPNs, SD-WAN, and security profiles. We confirm lifecycle dates for your exact unit.
We size the replacement on real throughput with security services enabled, port count, PoE for phones or Wi-Fi access points, and Trade-Up eligibility. Hardware is quoted by exact part number through Fortinet distribution; Trade-Up discounts depend on eligibility.
FortiConverter for the bulk of the config, then hand review: interface mapping, removed features, policy cleanup. The new unit is staged and tested before it goes on site.
A scheduled window with documented steps and a rollback path to the old unit if validation fails.
Trade-Up service transfer where eligible, documentation of the new config, and, if you want it, ongoing management on a managed plan.
Edge Firewall Watch covers a single firewall for $199 a month; its $750 setup fee is waived after a like-for-like FortiGate swap or Day-2 Takeover we perform. Edge Essential is from $695 per site per month for up to 10 devices, with monitoring and alerting, configuration backups and a monthly report; no change hours are included. Full plan details, hours and launch fees are on the services page, and managed network monitoring explains how monitoring works.
Edge Essential requires a Network Risk Assessment; Edge Firewall Watch and like-for-like swaps do not. See a sample report (PDF).
Track Record
Years of network-only practice. Architecture, security and operations.
Sites delivered. Healthcare clinics, law offices, financial branches, multi-site operations.
Design target for fully redundant builds with HA firewalls, diverse ISPs, and backed-up power.
The same senior engineer, start to finish. No junior handoffs. No ticket queue. No escalation chain.
Career aggregate. The 20+ years and 300+ sites span our founder’s full network-only practice, including prior-employer engagements. 99.99% availability, about 53 minutes of downtime per year, is an architecture design target for engagements that fund full redundancy. It is not a service guarantee or uptime SLA. Contracted response times and service levels are defined in each customer agreement.
Where We Work
Pre-staging and configuration happen remotely, and so does the cutover: a scheduled evening window with us on the line while someone at your site moves the cables. On-site cutover is available in Sacramento, the Bay Area and San Jose and quoted with the swap. Sacramento and San Francisco clients: see our Sacramento Fortinet MSP and Fortinet MSP in San Francisco pages. Replacing a non-Fortinet firewall is a firewall migration.
Once someone on site has moved the cables, a preconfigured out-of-band console connection gives us a second path to the new FortiGate if normal remote access is unavailable. Physical troubleshooting may still need someone on site.
FAQ
Yes. The FortiGate 60E reaches end of support on (end of order was ), per Fortinet’s life cycle notice. Its last FortiOS branch is 7.4, and it does not run 7.6.
Fortinet stops supporting the hardware, no FortiCare or FortiGuard contract can run past that date, and Fortinet’s security-fix (PSIRT) policy no longer covers the unit.
Fortinet’s Trade-Up matrix lists two: the 60F and the 70G. The 60F reaches end of order on and is a 2 GB-RAM model with fewer features on newer FortiOS, so for a new purchase the 70G is the practical choice. The 70G has no SSL VPN; we size it from your actual traffic, port count and PoE needs.
The end dates are set. Fortinet’s notice of puts the 60F and 61F end of order at and end of support at . Both run FortiOS 8.0; as 2 GB-RAM models they lost proxy features in 7.4.4 and SSL VPN in 7.6.
End of order ; last renewal date ; end of support , per Fortinet’s notice of . End of order stops sales, not support; renewals end a year before support does.
Normally licenses move only between identical models. Fortinet’s Trade-Up, run through partners and distributors, lets remaining FortiCare and FortiGuard term move from an end-of-order unit to an eligible replacement, with conditions such as a hardware-only replacement SKU and a set transfer window. We handle the Trade-Up paperwork through that path.
Fortinet publishes end-of-order notices in a public hardware life cycle RSS feed, its support portal has a lifecycle tool (login required), and Fortinet updates its Trade-Up matrix quarterly through partners. We can look up the dates for your unit from its serial.
Yes, after a hand check. FortiConverter handles FortiGate-to-FortiGate conversion at no charge, but interface mapping, model-specific features and anything removed in newer FortiOS need an engineer.
Hardware lead time sets the pace. The engineering is sizing, pre-staging and testing, then one scheduled cutover.
Two parts. Hardware, with bundle part numbers and reference list prices on the FortiGate 70G page, and the like-for-like swap fee above. Moving SSL VPN users to IPsec or ZTNA is quoted after scoping, and a replacement that also changes the design is priced as a firewall migration.
Related
Choosing between current models? See the FortiGate 30G vs 50G vs 70G vs 90G sizing guide, or see current models and list prices.
Sources
Lifecycle dates last reviewed against Fortinet’s product life cycle notices; 50G and 120G FortiOS support checked . Trade-Up replacement options are from the Q2 2026 Trade-Up matrix.
Replace an End-of-Life FortiGate
Include the FortiOS version and its current role: VPN, SD-WAN, HA and security profiles. Several units? Send the full model list.
Response from a senior engineer within 1 business day.
A direct conversation with the engineer, not a sales team.
A straight answer on fit, and clear next steps if we are the right one.
