question

As a cloud-delivered service, FortiSASE relies on specific versions of all components including FortiClient.

These version interactions are extensively tested not only by our Release QA, but by FortiSASE QA prior to each release. The versions officially supported by FortiSASE may not always reflect the current "GA" versions available for download through FortiCare.

How is versioning of endpoints handled within FortiSASE?

For new FortiSASE customers, we recommend downloading the FortiClient versions supplied under Configuration -> Users -> Onboard Users. Currently, at provisioning time there is no Managed Installer utilized to force endpoints to a specific version, so it is possible to installer newer versions temporarily. When an upgrade is required by FortiSASE, we will push it out to endpoints. Once this action is scheduled, a notification will be sent from the FortiSASE Status Page. Users will be notified to apply the update, which will require a reboot.

For already deployed FortiSASE customers, after FortiSASE releases, the Onboard Users section of the portal may temporarily reflect a newer version than what is already installed on your endpoints. If users install from this version, it is possible that they may be prompted to install a downgraded version, due to version enforcement. To address this, we will perform a scheduled maintenance activity, which is independent from the FortiSASE release, in order to push out newly supported FortiClient versions to already deployed endpoints. Once this action is scheduled, a notification will be sent from the FortiSASE Status Page. Users will be notified to apply the update, which will require a reboot.

If you have any further questions or concerns, please contact FortiCare support.