Simple definition
FortiOS is the operating system and software platform used by FortiGate appliances.
Technical definition
FortiOS combines the configuration plane and traffic-processing functions, including interfaces, routing, sessions, firewall policies, NAT, VPNs, and security profiles. Available features and some behaviors can vary by model and software version.
How it works / role
When a packet crosses a FortiGate, FortiOS determines the interface and route, finds or creates a session, evaluates applicable policies, and then applies the configured NAT and inspection actions. Administration is available through interfaces such as the GUI, CLI, and API.
What is it used for?
Configure, secure, and troubleshoot a FortiGate by controlling routing, traffic flows, VPNs, and related security functions.
Practical example
An administrator checks the active route, firewall policy, and session for a flow before concluding that a service is being blocked by the FortiGate.
Common issues
- A policy looks correct but routing or NAT is inconsistent
- An existing session preserves old behavior after a configuration change
- Syntax or feature behavior differs between FortiOS versions
- Policy order or configuration dependencies are misunderstood
Key takeaway: When troubleshooting FortiOS, follow the actual packet path through routing, policy, NAT, session, and security inspection.