FortiSIEM OS update process includes the following:
Whenever Redhat/CentOS publishes an important OS update for CentOS 8, an announcement is made via CentOS-announce mailing list. FortiSIEM engineering team subscribes to this mailing list. Once a new update is available, FortiSIEM engineering first tests these updates on FortiSIEM Virtual Appliance for stability and regression. After confirming that the update is safe, FortiSIEM CentOS 8 update server updates the OS packages from CentOS mirror servers.
Before release, FortiSIEM is updated with latest updates from FortiSIEM CentOS 8 update server. FortiSIEM customer automatically receives an OS update when they upgrade to the latest FortiSIEM.
If a customer needs to update CentOS 8 without upgrading FortiSIEM product itself, they can execute the script on demand: yum upgrade -y. For this, FortiSIEM instance needs port 443 access to:
Note: If you wish to set up an offline repository server instead of directly using Fortinet servers os-pkgs-cdn.fortisiem.fortinet.com and os-pkgs-c8.fortisiem.fortinet.com, check the Offline Upgrade guide in 6.3 Reference Manuals.