Introduction

This guide covers upgrading a FortiSOAR™ enterprise instance, High Availability (HA) cluster, or a distributed multi-tenant configuration.

The FortiSOAR UI displays a notification when a new release (always the latest) is available. The notification includes a link to the release notes, where you can review details about the latest version. This feature helps you stay informed about new releases and decide whether to upgrade to the most recent FortiSOAR version.

This document describes how to upgrade FortiSOAR to 7.6.5. This guide is intended to supplement the FortiSOAR Release Notes, and it includes the following sections:

• Preparing to Upgrade FortiSOAR

• Upgrading a FortiSOAR Enterprise Instance
  An "Upgrade Framework" was introduced in release 7.5.0 to improve the flexibility, usability, and efficiency of the FortiSOAR upgrade process.

• Upgrading a FortiSOAR High Availability Cluster
• Upgrading a FortiSOAR Distributed Multi-Tenancy Configuration
• Upgrading FortiSOAR using the Offline Repository
• Upgrading your FortiSOAR Docker image and upgrading your FortiSOAR Docker on an Amazon Elastic Kubernetes Cluster
• Post-Upgrade Tasks

If you encounter issues during the upgrade, see the Troubleshooting FortiSOAR chapter in the “Deployment Guide.”

Important considerations before upgrading FortiSOAR

Starting with release 7.6.5, the csadmin user’s sudo privileges are restricted to only the commands required to work with FortiSOAR, instead of providing full 'root' access. This enhancement aligns with the principle of least privilege and reduces exposure to sensitive system files. Therefore, commands such as yum, systemctl, csadm, etc, must be prefixed with sudo, for example, sudo csadm --help. To open or edit a file, prefix the command with 'sudo' and specify the file’s full path (sudo vi <full path of file>). For example, sudo vi /opt/cyops-auth/utilities/das.ini. Additionally note that for security reasons, 'root' access is provided via the system console and is not available over SSH.

• Upgrading an HA Cluster from Versions Prior to 7.6.1: If you are upgrading your FortiSOAR HA cluster from releases 7.6.0, 7.5.1, 7.5.0, etc. to release 7.6.1 or later, follow the steps in the Upgrading FortiSOAR High Availability Cluster for releases prior to 7.6.1 topic.
• Upgrading an HA Cluster from Version 7.6.1 onwards: If you are upgrading your FortiSOAR HA cluster from release 7.6.1 to release 7.6.2 or later, you can use the 'rolling upgrades' process. Steps for rolling upgrade are mentioned in the Upgrading FortiSOAR High Availability Cluster for releases post 7.6.1 topic.
• Post-Upgrade Action: After upgrading, log out from the FortiSOAR UI and log back in to complete the process.
• System Downtime: The upgrade procedure temporarily takes the FortiSOAR application offline. We recommend notifying users of the scheduled upgrade, as they will be unable to log in to the FortiSOAR during this time.