Upgrade information

The latest FortiNDR firmware versions are available for download from FortiCloud. You should always backup your system configuration before upgrading the firmware on your device. Be aware that some configuration settings are not saved to the backup configuration file and will need to be manually restored after upgrade.

Firmware

• 7.4.1 firmware is designed to run on FNR-3500F (gen3 and above) and is not compatible with older FAI-3500F hardware (gen1/2). For more information, see Supported models.

• FNR-3500F gen3 only: Upgrade from v7.1.0 to v7.2.x GA is supported.

• When upgrading FNR-3500F from 7.4.0 to 7.4.1 in Center Mode, you will need to run the following command after upgrade:

  execute db restore

VM Devices: Direct upgrade from v1.5.x, v7.0.x or v7.1.0 to v7.2.1 is not supported.

If your current version FortiNDR does not have a password, you will be prompted to create a password after upgrading, otherwise you cannot login.

Downloading the latest firmware version

To download the latest version of FortiNDR:

1. Log into FortiCloud.
2. In the banner, click Support > Firmware Download.

   

3. From the Select Product dropdown, select FortiNDR.
4. Click the Download tab.
5. Use the folders in the directory to locate and download the latest firmware version.

   

Upgrading the firmware version on hardware devices

Before you begin:

You should always backup your system configuration before upgrading the firmware on your device.

Be aware the following settings are not backed up to the configuration file:

• Network Share
• Network Share Quarantine
• File size limit
• Email Alert Recipients

Record these settings so you can manually restore them after upgrade.

The File size limit can be found by pressing the Tab key in the following CLI:

execute file-size-threshold {ICAP|OFTP|inline-blocking|manual-upload|network-share|sniffer} <size_limit_1-10240MB>

Please make a note for each file input value.

These settings cannot be recovered after they are removed.

To upgrade the FortiNDR firmware version:

1. Back up the configuration file:
   1. Click the Account menu at the top-right of the page.
   2. Go to Configuration > Backup. The configuration file is saved to your computer.
2. Upgrade the firmware:
   1. Go to System > Firmware.
   2. Click Upload and navigate to the location of the file you downloaded from FortiCloud.
   3. Click OK. After the firmware is upgraded the system reboots.
   4. After the upgrade is complete, use the following the CLI to restore the database.

      execute db restore 

      This command will format the database and remove all the logs and the following settings: Device input, Network Share, Network Share Quarantine, File size limit and Email Alert Recipients.

3. Due to a known issue, HA is not supported in v7.2.x. If HA was configured in the previous configuration file, use the following CLI to disable it.

   config system ha

   For information, see the FortiNDR CLI Reference.

4. Use the configuration settings you recorded earlier to manually restore the settings. For Device Input, you just need to re-authorize the device again.

Upgrading the firmware version on VM devices

Direct upgrade from v7.2.x to v7.4.0 is supported. Direct upgrade from v1.5.x, v7.0.x or v7.1.0 to v7.4.0 is not supported.

Before you begin:

You should always backup your system configuration before upgrading the firmware on your device.

Be aware the following settings are not backed up to the configuration file:

• Network Share
• Network Share Quarantine
• File size limit
• Email Alert Recipients

Record these settings so you can manually restore them after upgrade.

The File size limit can be found by pressing the Tab key in the following CLI:

execute file-size-threshold {ICAP|OFTP|inline-blocking|manual-upload|network-share|sniffer} <size_limit_1-10240MB>

Please make a note for each file input value.

These settings cannot be recovered after they are removed.

To deploy standalone VM:

1. Back up the configuration file:
   1. Click the Account menu at the top-right of the page.
   2. Go to Configuration > Backup. The configuration file is saved to your computer.
2. Deploy the VM from scratch. See Deploying FortiNDR VM.
3. Update the firmware version in the backup file you downloaded in Step 1.
   1. Open the backup file with a text editor such as Notepad ++.
   2. Update the firmware version in the first line of the file. For example:

      #config-version=FAIVMW-7.01-FW-build249-230302

      Will be updated to:

      #config-version=FAIVM-7.4.0-FW-build509-230302

4. Restore the backup configuration file.
   1. Click the Account menu at the top-right of the page.
   2. Go to Configuration > Restore.
   3. Click Upload and navigate to the location of the configuration file you downloaded.
5. Use the configuration settings you recorded earlier to manually restore the settings. For Device Input, you just need to re-authorize the device again.