Licensing and Upgrade information

FortiNDR requires a new SKU to enable FortiGuard downloads and lookups. The new SKUs available are:

Model	SKU	Description
FortiNDR-3500F	FNR-3500F	FortiNDR-3500F appliance for Network Anomalies and 0day/Malware Detection, based on Artificial Neural Network (ANN) technology. 2 x 10Gb GE Copper (supports 10/1000/10000 without transceivers), 2x 1 Gigabit Ethernet connection (management).
	FNR-3500F-BDL-331-DD	Hardware plus 24x7 FortiCare, with NDR and ANN engine updates & baseline.
	FC3-10-AIVMS-461-02-DD	Subscriptions license for FortiNDR-VM (16 CPU) with 24x7 FortiCare with NDR and ANN engine updates & baseline
	FC4-10-AIVMS-461-02-DD	Subscriptions license for FortiNDR-VM (32 CPU) with 24x7 FortiCare with NDR and ANN engine updates & baseline

Customers need to have the correct SKU for NDR functionalities to work. If customers are running FortiAI VMs on v1.5.x versions, please follow upgrade information below.

For customers running FortiAI v1.5.x and would like to enjoy FortiNDR features, a co-term upgrade is necessary. Please contact customer services at cs@fortinet.com.

FortiNDR v7.0.0 will use a new license file (than 1.5.x), therefore customers upgrading from 1.5.x should:

1. Prepare v7.0 license file via co-term upgrade.
2. Upgrade the VM/hardware.
3. Load the new license file into unit with the GUI.

If a new v7.0 license file is loaded on a 1.5.x VM, the VM will become non-functional. This does not apply to FAI-3500F hardware.

Upgrade information

Due to some database changes, after upgrade from 7.0.0 to 7.0.1, users will need to execute a CLI to clean up historical NDR log entries. Note this will clear all NDR logs, but malware logs will remain. execute cleanup ndr

• Always back up configuration before upgrade.

• Upgrade from v1.5.x and 7.0 beta 1&2 to v7.0.1 GA is supported.

• To upgrade the hardware or VM, please follow the procedures below:
  • Backup the configuration and take a note of version prior to upgrade.
  • Before upgrading the license from FortiAI VM v1.5.x to FortiNDR VM v7.0.1, you will need to download and apply the v7 firmware to the VM first. You have two options for applying the new FortiNDR contract:

    1. (For VM and HW) You can register the new contract at https://suppport.fortinet.com as a renewal/upgrade for the existing contract/serial number. The existing license will automatically get the updated entitlement information from FDS.

    2. (For VM only) You can register the new contract code as a new device and get a new license and serial number. Then you can download the new license file (.lic format), and load the new license in the GUI (go to System > FortiGuard). After you download the license, you will now have a FortiAI VM license in addition to a FortiNDR VM license.

A FortiNDR license CANNOT be loaded to a FortiAI VM. The upgrade must be done first otherwise it might cause FortiAI VM to become inaccessible. Downgrade from v7.0.1 is NOT supported, so please backup configuration before upgrade.