FortiSIEM OS update process includes the following:
Whenever Rocky Linux publishes an important OS update for Rocky Linux 8, an announcement is made via Rocky Linux 8 Changelog. FortiSIEM engineering team periodically watches this Changelog. Once a new update is available, FortiSIEM engineering first tests these updates on FortiSIEM Virtual Appliance for stability and regression. After confirming that the update is safe, FortiSIEM Rocky Linux 8 update server updates the OS packages from Rocky Linux 8 mirror servers.
Before release, FortiSIEM is updated with latest updates from FortiSIEM Rocky Linux 8 update server. FortiSIEM customer automatically receives an OS update when they upgrade to the latest FortiSIEM.
If a customer needs to update Rocky Linux 8 without upgrading FortiSIEM product itself, they can execute the script on demand: yum upgrade -y. For this, FortiSIEM instance needs port 443 access to:
Note: If you wish to set up an offline repository server instead of directly using Fortinet servers os-pkgs-cdn.fortisiem.fortinet.com and os-pkgs-r8.fortisiem.fortinet.com, check the Offline Upgrade guide in 6.5 Reference Manuals.