: The 60E is a 2GB RAM model. Upgrading to newer branches like 7.4.x may disable certain proxy-related features (such as ZTNA or proxy-based UTM profiles) due to hardware resource limits.
She realized the issue: the new firmware enforced stricter TLS cipher suites for IPsec. The dam’s ancient SCADA controller used a deprecated SHA-1 certificate. The 60E, now secure by default, rejected the tunnel. latest firmware for fortigate 60e