Special Notices

This section highlights some of the operational changes that administrators should be aware of in FortiSOAR MEA 7.2.0 r1.

Introduction of the SOAR Framework Solution Pack

Release 7.2.0 introduces the SOAR Framework Solution Pack (SP) which is the Foundational Solution Pack that creates the framework, including modules, dashboard, roles, widgets, etc., required for effective day-to-day operations of any SOC. The Incident Response modules have been removed from the FortiSOAR MEA platform and moved to the SOAR Framework SP. Therefore, from release 7.2.0 the Incident Response modules, i.e., Alerts, Incidents, Indicators, and War Rooms are not part of the FortiSOAR MEA platform, making it essential for users to install the SOAR Framework SP to optimally use and experience FortiSOAR MEA’s incident response. For detailed information about the SOAR Framework SP, see the SOAR Framework SP documentation.

In release 7.2.0 the SOAR Framework Solution Pack is installed by default on your FortiSOAR MEA system.

Creation of all users as 'admin' users

All users are created as 'admin' users when they log onto FortiSOAR MEA for the first time, as only admin users have access to FortiSOAR MEA on FortiAnalyzer. In the earlier releases, users who had any profile other than 'Super Admin' on FortiAnalyzer were created as 'T1 Analyst' users.