Fortinet black logo

Upgrade Information

Upgrade Information

Upgrading to FortiAnalyzer 5.6.11

You can upgrade FortiAnalyzer 5.4.0 or later directly to 5.6.11. If you are upgrading from versions earlier than 5.4.x, you should upgrade to the latest patch version of FortiAnalyzer 5.4 first.

note icon

For details about upgrading your FortiAnalyzer, see FortiAnalyzer Upgrade Guide.

Upgrading to FortiAnalyzer 5.4.x

Upgrade automatically triggers an SQL rebuild post upgrade to 5.6.x. The SQL rebuild must complete for FortiAnalyzer to function normally. You can verify the database rebuild status by using the diagnose SQL status rebuild-db command.

If you decide to continue the upgrade to 6.0.x, you can ignore the status of the rebuild and continue to the upgrade to 6.0.x.

ESX VM network mapping after upgrade

Starting with FortiAnalyzer 5.6.0, Fortinet changed the network interface mapping as shown below. After upgrade to FortiAnalyzer 5.6.11, you must edit ESX VM network mapping in order to preserve network connectivity.

  • port1 -> Network Adapter 1
  • port2 -> Network Adapter 2
  • port3 -> Network Adapter 3
  • port4 -> Network Adapter 4

New FortiAnalyzer 5.6.0 and later VM installations use the correct mapping with ESX 5.5 and later.

Downgrading to previous versions

FortiAnalyzer does not provide a full downgrade path. You can downgrade to a previous firmware release via the GUI or CLI, but doing so results in configuration loss. A system reset is required after the firmware downgrading process has completed. To reset the system, use the following CLI commands via a console port connection:

execute reset all-settings

execute format {disk | disk-ext4}

Firmware image checksums

The MD5 checksums for all Fortinet software and firmware releases are available at the Customer Service & Support portal, https://support.fortinet.com. To verify the integrity of the download, select the Checksum link next to the HTTPS download link. A dialog box will be displayed with the image file name and checksum code. Compare this checksum with the checksum of the firmware image.

FortiAnalyzer VM firmware

Fortinet provides FortiAnalyzer VM firmware images for Amazon AWS, Citrix and Open Source XenServer, Linux KVM, Microsoft Hyper-V Server, and VMware ESX/ESXi virtualization environments.

Amazon Web Services
  • The 64-bit Amazon Machine Image (AMI) is available on the AWS marketplace.
Citrix XenServer and Open Source XenServer
  • .out: Download the 64-bit firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .out.OpenXen.zip: Download the 64-bit package for a new FortiAnalyzer VM installation. This package contains the QCOW2 file for the Open Source Xen Server.
  • .out.CitrixXen.zip: Download the 64-bit package for a new FortiAnalyzer VM installation. This package contains the Citrix XenServer Disk (VHD), and OVF files.
Google GCP
  • .out: Download the 64-bit firmware image to upgrade your existing FortiManager VM installation.
  • .out.gcp.zip: Download the 64-bit package for a new FortiManager VM installation.
Linux KVM
  • .out: Download the 64-bit firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .out.kvm.zip: Download the 64-bit package for a new FortiAnalyzer VM installation. This package contains QCOW2 that can be used by qemu.
Microsoft Azure

The files for Microsoft Azure have AZURE in the filenames, for example FAZ_VM64_AZURE-v<number>-build<number>-FORTINET.out.hyperv.zip.

  • .out: Download the firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .hyperv.zip: Download the package for a new FortiAnalyzer VM installation. This package contains a Virtual Hard Disk (VHD) file for Microsoft Azure.
Microsoft Hyper-V Server

The files for Microsoft Hyper-V Server have HV in the filenames, for example, FAZ_VM64_HV-v<number>-build<number>-FORTINET.out.hyperv.zip.

  • .out: Download the firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .hyperv.zip: Download the package for a new FortiAnalyzer VM installation. This package contains a Virtual Hard Disk (VHD) file for Microsoft Hyper-V Server.
note icon

Microsoft Hyper-V 2016 is supported.

VMware ESX/ESXi
  • .out: Download either the 64-bit firmware image to upgrade your existing VM installation.
  • .ovf.zip: Download either the 64-bit package for a new VM installation. This package contains an Open Virtualization Format (OVF) file for VMware and two Virtual Machine Disk Format (VMDK) files used by the OVF file during deployment.
note icon

For more information see the FortiManager product data sheet available on the Fortinet web site, http://www.fortinet.com/products/fortimanager/virtual-security-management.html. VM installation guides are available in the Fortinet Document Library.

SNMP MIB files

You can download the FORTINET-FORTIMANAGER-FORTIANALYZER.mib MIB file in the firmware image file folder. The Fortinet Core MIB file is located in the main FortiAnalyzer v5.00 file folder.

Upgrade Information

Upgrading to FortiAnalyzer 5.6.11

You can upgrade FortiAnalyzer 5.4.0 or later directly to 5.6.11. If you are upgrading from versions earlier than 5.4.x, you should upgrade to the latest patch version of FortiAnalyzer 5.4 first.

note icon

For details about upgrading your FortiAnalyzer, see FortiAnalyzer Upgrade Guide.

Upgrading to FortiAnalyzer 5.4.x

Upgrade automatically triggers an SQL rebuild post upgrade to 5.6.x. The SQL rebuild must complete for FortiAnalyzer to function normally. You can verify the database rebuild status by using the diagnose SQL status rebuild-db command.

If you decide to continue the upgrade to 6.0.x, you can ignore the status of the rebuild and continue to the upgrade to 6.0.x.

ESX VM network mapping after upgrade

Starting with FortiAnalyzer 5.6.0, Fortinet changed the network interface mapping as shown below. After upgrade to FortiAnalyzer 5.6.11, you must edit ESX VM network mapping in order to preserve network connectivity.

  • port1 -> Network Adapter 1
  • port2 -> Network Adapter 2
  • port3 -> Network Adapter 3
  • port4 -> Network Adapter 4

New FortiAnalyzer 5.6.0 and later VM installations use the correct mapping with ESX 5.5 and later.

Downgrading to previous versions

FortiAnalyzer does not provide a full downgrade path. You can downgrade to a previous firmware release via the GUI or CLI, but doing so results in configuration loss. A system reset is required after the firmware downgrading process has completed. To reset the system, use the following CLI commands via a console port connection:

execute reset all-settings

execute format {disk | disk-ext4}

Firmware image checksums

The MD5 checksums for all Fortinet software and firmware releases are available at the Customer Service & Support portal, https://support.fortinet.com. To verify the integrity of the download, select the Checksum link next to the HTTPS download link. A dialog box will be displayed with the image file name and checksum code. Compare this checksum with the checksum of the firmware image.

FortiAnalyzer VM firmware

Fortinet provides FortiAnalyzer VM firmware images for Amazon AWS, Citrix and Open Source XenServer, Linux KVM, Microsoft Hyper-V Server, and VMware ESX/ESXi virtualization environments.

Amazon Web Services
  • The 64-bit Amazon Machine Image (AMI) is available on the AWS marketplace.
Citrix XenServer and Open Source XenServer
  • .out: Download the 64-bit firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .out.OpenXen.zip: Download the 64-bit package for a new FortiAnalyzer VM installation. This package contains the QCOW2 file for the Open Source Xen Server.
  • .out.CitrixXen.zip: Download the 64-bit package for a new FortiAnalyzer VM installation. This package contains the Citrix XenServer Disk (VHD), and OVF files.
Google GCP
  • .out: Download the 64-bit firmware image to upgrade your existing FortiManager VM installation.
  • .out.gcp.zip: Download the 64-bit package for a new FortiManager VM installation.
Linux KVM
  • .out: Download the 64-bit firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .out.kvm.zip: Download the 64-bit package for a new FortiAnalyzer VM installation. This package contains QCOW2 that can be used by qemu.
Microsoft Azure

The files for Microsoft Azure have AZURE in the filenames, for example FAZ_VM64_AZURE-v<number>-build<number>-FORTINET.out.hyperv.zip.

  • .out: Download the firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .hyperv.zip: Download the package for a new FortiAnalyzer VM installation. This package contains a Virtual Hard Disk (VHD) file for Microsoft Azure.
Microsoft Hyper-V Server

The files for Microsoft Hyper-V Server have HV in the filenames, for example, FAZ_VM64_HV-v<number>-build<number>-FORTINET.out.hyperv.zip.

  • .out: Download the firmware image to upgrade your existing FortiAnalyzer VM installation.
  • .hyperv.zip: Download the package for a new FortiAnalyzer VM installation. This package contains a Virtual Hard Disk (VHD) file for Microsoft Hyper-V Server.
note icon

Microsoft Hyper-V 2016 is supported.

VMware ESX/ESXi
  • .out: Download either the 64-bit firmware image to upgrade your existing VM installation.
  • .ovf.zip: Download either the 64-bit package for a new VM installation. This package contains an Open Virtualization Format (OVF) file for VMware and two Virtual Machine Disk Format (VMDK) files used by the OVF file during deployment.
note icon

For more information see the FortiManager product data sheet available on the Fortinet web site, http://www.fortinet.com/products/fortimanager/virtual-security-management.html. VM installation guides are available in the Fortinet Document Library.

SNMP MIB files

You can download the FORTINET-FORTIMANAGER-FORTIANALYZER.mib MIB file in the firmware image file folder. The Fortinet Core MIB file is located in the main FortiAnalyzer v5.00 file folder.