You can upgrade the firmware of an operating FortiAnalyzer cluster in the same way as upgrading the firmware of a standalone FortiAnalyzer unit. During the firmware upgrade procedure, you connect to the primary unit GUI or CLI to upgrade the firmware.
Similar to upgrading the firmware of a standalone FortiAnalyzer unit, normal FortiAnalyzer operations are temporarily interrupted while the cluster firmware upgrades. Because of this interruption, you should upgrade cluster firmware during a maintenance period.
- Log into the primary unit GUI.
- Upgrade the primary unit firmware.
The firmware is sent to all backup units, and then all units (primary and backup) are rebooted.
See the FortiManager Release Notes and FortiManager Upgrade Guide in the Fortinet Document Library for more information.
See the FortiAnalyzer Release Notes and FortiAnalyzer Upgrade Guide in the Fortinet Document Library for more information.
The primary unit reboots and upgrades. Wait for the upgrade to complete.
When the primary unit reboots, a backup unit is automatically selected to be the primary unit so that the HA cluster continues to function.
- When the upgrade is complete on the original primary unit, repeat steps 1–2 on the newly selected primary unit.
- Repeat this procedure until all units in the cluster are upgraded.
You might not be able to connect to the FortiAnalyzer GUI until the upgrade synchronization process is complete. During the upgrade, using SSH or telnet to connect to the CLI might be slow. If necessary, use the console to connect to the CLI.