Upgrade information

The latest FortiNDR firmware versions are available for download from FortiCloud. You should always backup your system configuration before upgrading the firmware on your device. Beware that some configuration settings are not saved to the backup configuration file and will need to be manually restored after upgrade.

Firmware

• 7.2.3 firmware is designed to run on FNR-3500F (gen3 and above) and is not compatible with older FAI-3500F hardware (gen1/2). For more information, see Supported models.

• FNR-3500F gen3 only: Upgrade from v7.2.x to v7.2.3 is supported

v7.2.3 mainly fixes known issue 1006195 where upgrade to v7.2.2 will result in lost configuration.

VM Devices: Direct upgrade from v1.5.x, v7.0.x or v7.1.0 to v7.2.3 is not supported due to legacy database support.

Downloading the latest firmware version

To download the latest version of FortiNDR:

1. Log into FortiCloud.
2. In the banner, click Support > Firmware Download.

   

3. From the Select Product dropdown, select FortiNDR.
4. Click the Download tab.
5. Use the folders in the directly to locate and download the latest firmware version.

   

Upgrading the firmware version

Before you begin:

You should always backup your system configuration before upgrading the firmware on your device.

Be aware the following settings are not backed up to the configuration file:

• Network Share
• Network Share Quarantine
• File size limit
• Email Alert Recipients

Record these settings so you can manually restore them after upgrade.

The File size limit can be found hitting tab key in the following CLI:

execute file-size-threshold {ICAP|OFTP|inline-blocking|manual-upload|network-share|sniffer} <size_limit_1-10240MB>

Please make a note for each file input value.

These settings cannot be recovered after they are removed.

To upgrade the FortiNDR firmware version:

1. Back up the configuration file:
   1. Click the Account menu at the top-right of the page.
   2. Go to Configuration > Backup. The configuration file is saved to your computer.
2. Upgrade the firmware:
   1. Go to System > Firmware.
   2. Click Upload and navigate to the location of the file you downloaded from FortiCloud.
   3. Click OK. After the firmware is upgraded the system reboots.
   4. After the upgrade is complete, use the following the CLI to restore the database.

      execute db restore 

      This command will format the database and remove all the logs and the following settings: Device input, Network Share, Network Share Quarantine, File size limit and Email Alert Recipients.

3. Due to a known issue, HA is not supported in v7.2.x. If HA was configured in the previous configuration file, use the following CLI to disable it.

   config system ha

   For information, see the FortiNDR CLI Reference.

4. Use the configuration settings you recorded earlier to manually restore the settings. For Device Input, you just need to re-authorize the device again.