FortiOS 8.0.0 which has been released yesterday, is one of the more interesting Fortinet releases in recent years. While the 7.x branch focused heavily on platform refinement, operational maturity, and steady improvements to areas such as automation, inspection, SD-WAN, and manageability, FortiOS 8.0.0 feels more forward-looking in its positioning. It is built around themes that are now shaping enterprise security discussions much more directly: AI-aware protection, stronger data loss prevention, secure networking evolution, and quantum-safe readiness.

In this post, I want to look at what changed from the 7.x generation to FortiOS 8.0.0, what appears to have improved, and which additions I personally find the most interesting.

Looking back at FortiOS 7.x

Before talking about FortiOS 8.0.0, it helps to understand the role of the 7.x line. FortiOS 7.x was not only about adding isolated features. In many environments, it was about making the platform more polished and easier to operate at scale.

Across the 7.x lifecycle, Fortinet kept improving areas such as:

  • Automation and orchestration workflows.
  • Inspection and policy capabilities.
  • SD-WAN behavior and branch connectivity.
  • Administrative visibility and management experience.
  • General platform maturity for day-to-day operations.

That matters because many security teams do not judge a release only by flashy headlines. They judge it by how stable, predictable, and usable the platform becomes over time. In that sense, the 7.x generation laid a strong foundation.

What feels different in FortiOS 8.0.0

FortiOS 8.0.0 feels different because the messaging is much more aligned with current security pressure points. Instead of being mainly a refinement release, it looks like a release that tries to address the next wave of operational and security challenges.

The most notable themes in FortiOS 8.0.0 are:

  • AI-aware security and governance.
  • Improved data protection capabilities.
  • Stronger secure networking and SASE direction.
  • Support for quantum-safe or post-quantum security approaches.
  • More intelligent operational assistance.

That combination makes 8.0.0 feel less like a maintenance step and more like a strategic release.

FortiOS 8.0.0 vs 7.x

The easiest way to describe the difference is this: FortiOS 7.x improved the platform, while FortiOS 8.0.0 expands the platform’s relevance.

FortiOS 7.x was about making FortiGate environments better to run. FortiOS 8.0.0 appears more focused on helping organizations deal with modern realities such as AI use inside the business, more demanding data protection needs, distributed access patterns, and long-term cryptographic change.

Here is how I would summarize the shift.

Area FortiOS 7.x FortiOS 8.0.0
Main character Platform refinement Strategic feature expansion
Security operations Better workflows and operational maturity More AI-assisted and intelligence-driven direction
Data protection Traditional inspection and policy enforcement Stronger DLP focus, including image and OCR-driven use cases
Network direction Continued SD-WAN and firewall evolution Broader secure networking and SASE-oriented thinking
Long-term security Conventional enterprise protection Greater focus on quantum-safe readiness

New features that stand out

Several new areas in FortiOS 8.0.0 stand out more than others.

1. AI-aware controls

This is probably one of the most relevant additions for modern enterprises. Organizations increasingly want to allow the use of generative AI tools, but they also need visibility, governance, and protection around how those tools are used.

That is why AI-aware controls are important. They suggest that FortiOS is no longer only concerned with classic application traffic, but also with the security implications of AI-driven workflows inside real business environments.

2. DLP with OCR support

This is one of the features I like most. Traditional data protection approaches often focus on text-based content, attachments, or known file types. But sensitive information today is often shared through screenshots, scanned documents, and images.

OCR-enhanced DLP helps close that gap. From a practical security perspective, that is a very useful improvement because it targets a form of data leakage that is easy to overlook.

3. Next-generation secure networking

FortiOS 8.0.0 also appears to strengthen the secure networking side of the platform, including SASE-related direction. That is important because the firewall is no longer operating only as a fixed edge device in a simple perimeter model.

Today’s environments are more distributed. Users, applications, and data paths are spread across branch locations, remote work scenarios, SaaS services, and cloud platforms. A release that improves how security and connectivity work together is therefore highly relevant.

4. Quantum-safe direction

Another feature area that deserves attention is quantum-safe security. Even if many organizations are not making day-to-day buying decisions based on post-quantum cryptography yet, it is still significant to see vendors preparing for that future.

This matters especially in sectors where long-term confidentiality matters. It shows that Fortinet is thinking beyond immediate threat signatures and toward broader cryptographic resilience.

What improved from my perspective

From my perspective, the biggest improvement is not just one feature. It is the way the release aligns security controls with how people actually work now.

Modern users do not only browse websites and connect to branch offices. They use cloud platforms, AI tools, screenshots, shared content, and distributed applications. A firewall operating system that recognizes these patterns is more valuable than one that only keeps refining old assumptions.

That is why FortiOS 8.0.0 feels more meaningful than a normal upgrade. It seems to move the conversation from “how can I manage this firewall better?” to “how can this platform help me secure the way my organization is evolving?”

What I like most

If I had to pick my favorite aspects of FortiOS 8.0.0, they would be these three.

AI-aware security

This is high on my list because AI use is now a real governance topic inside companies. Security teams need ways to balance enablement and control, and that makes this feature area very relevant.

IPv6 improvements

IPv6 support in FortiOS is one of my highlights. Now it is starting to feel like a fully grown part of the routing stack. FortiOS 8.0.0 adds meaningful improvements that make IPv6 more usable in production networks, especially for multicast and inter‑ISP scenarios. Finally, IPv6 gets more polish around typical edge cases, such as improved PIM‑6 support, HA‑synchronized IPv6‑multicast routes, and IPv6‑PCP integration for DNAT46 in NAT64 deployments.

Custom tags for address objects

Now this is my favorite one! One of the most welcome small‑but‑practical additions is the ability to tag addresses and policies in the GUI. In FortiOS 8.0.0, Fortinet introduces a dedicated tags feature for address objects and firewall policies, letting you attach metadata‑like labels to both objects and rules.

Final thoughts

FortiOS 7.x was important because it strengthened the foundation. It improved daily operations, platform maturity, and the overall usability of the FortiGate ecosystem.

FortiOS 8.0.0 builds on that base, but it feels more ambitious. Instead of only polishing what already exists, it starts to address where enterprise security is going next.

For me, that is what makes this release interesting. The combination of AI-aware controls, stronger DLP with OCR, secure networking improvements, and quantum-safe direction makes FortiOS 8.0.0 look like more than just the next version number. It looks like a release designed for the next set of real-world security problems.

Getting started
Release Notes
New Features
CLI Reference
Administration Guide
Best Practices