What changes on 2026-12-29
Fortinet’s Trade-Up matrix lists end of support for the 60E on 2026-12-29. Its last FortiOS branch is 7.4; it does not run 7.6. After end of support, don’t plan on new firmware or vulnerability fixes for the unit.
FortiGate End of Life Replacement
FortiGate end of life dates and replacement.
Act before support runs out.
The FortiGate 60E reaches end of support on 2026-12-29. The 61E, 80E, 90E, 100E, and 101E are already past it. After end of support, don’t plan on new firmware or security fixes for that hardware. We size the replacement from your real traffic, coordinate Trade-Up service-term transfer where eligible, convert and hand-check the configuration, and cut over with a rollback path. Based in Sacramento, serving the Bay Area and remote across California.
FortiGate End of Life Dates
FortiGate end of life list, dates, and replacement matrix.
End-of-order (EOO) and end-of-support (EOS) dates and the Trade-Up replacement options below are from Fortinet’s Trade-Up transfer-of-services matrix (Q3 2025); last FortiOS branch is from Fortinet’s release notes. Replacement options are as listed in that matrix; eligibility is confirmed per unit before quoting. Reviewed 2026-10-02. Confirm your exact unit in Fortinet’s life cycle lookup before ordering.
| Model | End of order | End of support | Last FortiOS | Trade-Up replacement options |
|---|---|---|---|---|
| FortiGate 30E | 2022-03-31 | 2027-03-31 | FortiOS 6.2 | 40F, 30G, 50G |
| FortiGate 50E | 2022-03-31 | 2027-03-31 | FortiOS 6.2 | 60F, 70F, 50G, 70G |
| FortiGate 51E | 2022-07-15 | 2027-07-15 | FortiOS 6.2 | 61F, 71F, 51G, 71G |
| FortiGate 60E | 2021-12-29 | 2026-12-29 | FortiOS 7.4 | 60F, 70F, 70G |
| FortiGate 61E | 2021-07-15 | 2026-07-15 (passed) | FortiOS 7.4 | 61F, 71F, 71G |
| FortiGate 60E-POE | 2022-10-14 | 2027-10-14 | FortiOS 7.4 | 80F-POE |
| FortiGate 80E | 2021-08-17 | 2026-08-17 (passed) | FortiOS 7.4 | 80F, 90G |
| FortiGate 81E | 2021-11-14 | 2026-11-14 | FortiOS 7.4 | 81F, 91G |
| FortiGate 90E | 2020-04-15 | 2025-04-15 (passed) | FortiOS 7.4 | 80F, 81F, 90G |
| FortiGate 100E | 2021-08-17 | 2026-08-17 (passed) | FortiOS 7.2 | 100F, 90G, 120G |
| FortiGate 101E | 2021-07-15 | 2026-07-15 (passed) | FortiOS 7.2 | 101F, 121G |
Fortinet’s policy: the last service extension date is 12 months before end of support, and no FortiCare or FortiGuard contract extends past end of support. 40F, 60F, and 61F have no published end-of-order date as of 2026-10-02.
FortiGate 60E
FortiGate 60E end of life: replacement before 2026-12-29.
The FortiGate 60E is a common small-office firewall with an end-of-support date approaching on 2026-12-29. Plan the replacement now so the cutover happens in a change window you choose, not after support ends.
Which replacement
The Trade-Up matrix lists the 60F, 70F and 70G as eligible replacements. The 70G is the only current G-series model on that list: Fortinet list price is $1,562 for the appliance (as of 2026-09-07); bundle pricing and every part number are on the FortiGate 70G page, or size it in the sizing guide.
If your users rely on SSL-VPN
The 70G does not support SSL-VPN; Fortinet’s datasheet lists SSL-VPN as N/A. A 60E running SSL-VPN needs a plan for IPsec or ZTNA before the swap. See FortiGate SSL-VPN migration.
Move the configuration, not just the box
Policies, VPNs, address objects and SD-WAN rules move to the new model and are tested before cutover, with the old unit kept ready to roll back. See firewall migration, or send us the model and serial for a replacement quote.
Why End of Support Matters
What changes when a FortiGate hits end of support.
An end-of-support firewall still passes traffic. That’s the problem — it keeps running while the risk quietly grows.
No more security fixes
Fortinet’s PSIRT policy applies to products that have not reached end of life. After hardware end of support, don’t plan on new firmware or vulnerability remediation for that unit.
Stuck on an old FortiOS branch
Older hardware stops at a branch — 6.2 for the 30E/50E, 7.2 for the 100E, 7.4 for the 60E/80E/90E. Once that branch leaves engineering support, only critical and PSIRT fixes may be released, at Fortinet’s discretion.
No renewals
FortiCare and FortiGuard can’t be extended past end of support, and the last extension date is 12 months before it. Lapsed services mean stale threat intelligence and no support case path.
Forced upgrades on lapsed units
Since FortiOS 7.4.9 / 7.6.4, FortiGate appliances with invalid support contracts or that have reached end of support may be automatically upgraded to the latest patch — reschedulable within 14 days, not cancellable. Unplanned firmware changes are a reason to plan the replacement.
The F-Series Question
40F, 60F, and 61F: not end of life, but shrinking.
These models have no published end-of-order date and are supported on FortiOS 8.0. But they are 2 GB-RAM models, and Fortinet has removed some features from 2 GB models in newer FortiOS releases.
FortiOS 7.4.4
Proxy-based features were removed from 2 GB models: proxy inspection mode, explicit/transparent proxy, and related profiles convert to flow mode on upgrade.
FortiOS 7.6.x
SSL VPN was removed from the 40F, 60F/61F, and FGR-60F, and tunnel mode was removed from all models in 7.6.3. See our FortiGate SSL VPN migration page.
When to replace early
If you depend on proxy-mode inspection, SSL VPN, or you’re near the unit’s throughput limit with security services on, a refresh now can cost less than working around missing features.
When to keep it
If flow-mode inspection and IPsec meet your needs and the box has headroom, keep it, keep it patched, and plan the refresh on your schedule.
How a Replacement Works
Five steps from end-of-life to current.
1 · Inventory and dates
Model, serial, FortiOS version, licenses, HA, VPNs, SD-WAN, and security profiles. We confirm lifecycle dates for your exact unit.
2 · Sizing and quote
Replacement sized on real throughput with security services enabled, ports, and PoE — plus Trade-Up eligibility. Hardware quoted through Fortinet distribution; pricing and Trade-Up discounts depend on eligibility.
3 · Convert and pre-stage
FortiConverter for the bulk of the config, then hand review: interface mapping, removed features, policy cleanup. The new unit is staged and tested before it goes on site.
4 · Cutover
A scheduled window with documented steps and a rollback path to the old unit if validation fails.
5 · License transfer and handoff
Trade-Up service transfer where eligible, documentation of the new config, and optional ongoing management.
Track Record
The numbers behind the outcomes.
We only do networks. That is not a limitation — it is why the outcomes are different.
Engineering
20+
Years of network-only practice. Architecture, security, and operations — not IT generalism.
Delivery
300+
Sites delivered. Healthcare clinics, law offices, financial branches, multi-site operations.
Availability
99.99%
Design target for fully redundant builds with HA firewalls, diverse ISPs, and backed-up power.
Ownership
100%
Senior engineer–led. No junior handoffs. No ticket queue. No escalation chain.
Career aggregate. The 20+ years and 300+ sites span the operator’s full network-only practice, including prior-employer engagements. 99.99% availability, about 53 minutes of downtime per year, is an architecture design target for engagements that fund full redundancy. It is not a service guarantee or uptime SLA. Contracted response times and service levels are defined in each customer agreement.
Where We Work
Sacramento, the Bay Area, and remote across California.
Pre-staging and configuration happen remotely; cutover is on site or remote-hands guided, your choice. Local clients: see our Fortinet MSP in Sacramento and Fortinet MSP in San Francisco pages. Replacing a non-Fortinet firewall? See firewall migration. Want it watched afterward? See network monitoring.
FAQ
FortiGate end of life questions.
Is the FortiGate 60E end of life?
Fortinet's Trade-Up matrix lists the FortiGate 60E with an end-of-order date of 2021-12-29 and end of support on 2026-12-29. Its last supported FortiOS branch is 7.4 — it is not supported on 7.6.
What happens after a FortiGate reaches end of support?
Fortinet is no longer obligated to provide support services for that hardware, and no FortiCare or FortiGuard contract extends past the end-of-support date. Fortinet's PSIRT policy applies to products that have not reached end of life, so don't plan on new firmware or vulnerability fixes for an end-of-support unit.
What is the FortiGate 60E replacement model?
Fortinet's Trade-Up matrix lists the 60F, 70F, and 70G as eligible replacements. Which one fits depends on throughput with security services enabled, port count, PoE needs, and how long you want the new unit to stay current. We size it from your actual traffic, not the datasheet headline.
Is the FortiGate 60F end of life?
No end-of-order date has been published for the 40F, 60F, or 61F as of 2026-10-02, and they are supported on FortiOS 8.0. They are 2 GB-RAM models, though: FortiOS 7.4.4 removed proxy-based features from them and 7.6 removed SSL VPN, so check whether the features you rely on still exist.
Can we move our existing FortiGuard license to the new FortiGate?
Normally licenses transfer only between identical models. Fortinet's Trade-Up program, run through partners and distributors, lets remaining FortiCare and FortiGuard term move from an end-of-order unit to an eligible replacement, with conditions (hardware-only replacement SKU, transfer within a set window). We coordinate the Trade-Up paperwork through the partner and distributor path.
Where can I find the official FortiGate end of life matrix?
Fortinet publishes life cycle dates in its support portal's product life cycle lookup (login required) and updates its Trade-Up transfer-of-services matrix quarterly through partners. The table on this page is from the Q3 2025 matrix; send us your serial and we'll confirm the current dates for your unit.
Will our configuration carry over?
Mostly. FortiConverter handles FortiGate-to-FortiGate conversions at no charge, but interface mapping, model-specific features, and anything removed in newer FortiOS (proxy features, SSL VPN tunnel mode) need an engineer. We convert, review by hand, and test before cutover.
How fast can you replace an end-of-life FortiGate?
Hardware lead time is usually the longest step. A typical single-site swap is: sizing and quote, order, pre-stage and test the new unit, then a scheduled cutover window with rollback to the old unit. We quote a fixed price after a short call.
Related
Choosing between current models? See the FortiGate 30G vs 50G vs 70G vs 90G sizing guide, or see current models and list prices.
Sources
Checked against Fortinet’s own documentation.
Last reviewed 2026-10-02. Fortinet updates lifecycle dates and the Trade-Up matrix quarterly; confirm your unit before ordering.
- Fortinet Trade-Up transfer of services matrix, Q3 2025 (Fortinet-authored, distributor-hosted)
- FortiOS 7.6.0 release notes — SSL VPN removed from 2 GB RAM models
- Fortinet Community — Product life cycle information (EOO, LSED, EOS)
- Fortinet Community — Hardware limited to an older FortiOS branch
- FortiOS 7.6.0 release notes — supported models (60E family absent)
- FortiOS 7.4.0 release notes — supported models (100E family absent)
- FortiOS 7.4.4 — proxy features removed from 2 GB RAM models
- FortiOS 7.6.4 — automatic firmware upgrades for units out of support
- Fortinet Community — License transfer between FortiGates
- Fortinet — FortiConverter FAQ
- FortiGuard PSIRT policy
- Fortinet product life cycle lookup
Fortinet, FortiGate, FortiOS, FortiGuard, and FortiCare are trademarks of Fortinet, Inc. Ambio Edge Networks is an independent Fortinet partner and is not affiliated with or endorsed by Fortinet.
After it’s installed: have us run it
Edge Essential, $695 per site per month
Automated 24/7 monitoring and alerting to your Slack, Teams or email and to us, configuration backups, a monthly report, and next-business-day response from a senior engineer (Mon–Fri, 8–6 Pacific). Up to 10 managed devices.
What it doesn’t include
No change hours are included. Standard remote changes you ask for bill at $225/hr, 30-minute minimum; larger engineering work is quoted first. Hardware, licensing and migration are quoted separately.
Getting started
One-time monitoring launch: $3,500 for the first site (dashboard, alert routing, baseline, runbook). Faster response and included change hours are on the Secure and Compliance plans.
Not sure yet?
Start with a fixed-fee network risk assessment, or read how managed network monitoring works.
Replace an End-of-Life FortiGate
Send us your model and serial.
Get a replacement plan and quote.
Tell us the model, FortiOS version, active licenses, and what the firewall does today (VPNs, SD-WAN, HA, security profiles). We’ll confirm its lifecycle dates, recommend a replacement sized to your traffic, check Trade-Up eligibility, and quote hardware plus migration.
What Happens Next
Response from a senior engineer within 1 business day.
A direct conversation — no sales team, no runaround.
An honest assessment of whether we are the right fit.
Clear next steps if we are — no pressure if we are not.