Fortinet required update – critical

Urgent! Deputy Prime Minister and Minister of Digitization, Krzysztof Gawkowski, who also serves as the government’s plenipotentiary for cyber security, has issued an important recommendation for entities in the National Cyber Security System (KSC) regarding Fortinet products.

Gawkowski stresses the importance of “updating without delay” Fortinet products, pointing out the need to upgrade to the latest versions available for the FortiOS/FortiProxy and FortiClientEMS lines. The minister mentions specific recommended software versions, such as FortiOS/FortiProxy versions 7.4.3, 7.2.8, 7.0.14, 6.4.15 and FortiClientEMS versions 7.2.3 and 7.0.11.

CSRIT MON

The recommendation is intended to safeguard against potential threats and is the result of consultations with experts from CSIRT MON, CSIRT NASK and CSIRT GOV. In light of Article 33(4a) of the National Cyber Security System Act of July 5, 2018, failure to comply with the recommendations may lead to the risk of a so-called critical incident.

In addition, Gawkowski recommends that Fortinet products that are no longer supported be taken out of service. It is worth noting the need to use the latest software or change to a more up-to-date and secure solution.

The recommendations for users are available on Fortinet’s official website, where messages from February 8 to March 12, 2024 are posted. It’s a reminder of the ongoing need to be mindful of cybersecurity and the informed use of technology in the face of growing cyber threats.