Special Notices

This section highlights some of the operational changes that administrators should be aware of in FortiSOAR Cloud version 7.2.0.

FortiCloud Premium license

The FortiSOAR Cloud portal checks for the FortiCloud Premium license. If the FortiSOAR Cloud license is valid, but the FortiCloud Premium license is expired, a warning is displayed as shown in the following image:

To access the portal, renew the FortiCloud Premium license.

Introduction of the SOAR Framework Solution Pack

Release 7.2.0 introduces the SOAR Framework Solution Pack (SP) which is the Foundational Solution Pack that creates the framework, including modules, dashboard, roles, widgets, etc., required for effective day-to-day operations of any SOC. The Incident Response modules have been removed from the FortiSOAR Cloud platform and moved to the SOAR Framework SP. Therefore, from release 7.2.0 the Incident Response modules, i.e., Alerts, Incidents, Indicators, and War Rooms are not part of the FortiSOAR Cloud platform, making it essential for users to install the SOAR Framework SP to optimally use and experience FortiSOAR Cloud’s incident response. For detailed information about the SOAR Framework SP, see the SOAR Framework SP documentation.

In release 7.2.0 the SOAR Framework Solution Pack is installed by default on your FortiSOAR Cloud system.

Change in the default role from T1 Analyst to SOC Analyst

When a new user logs in to their account, they are automatically assigned the SOC Analyst (earlier T1 Analyst) role on FortiSOAR, if they are added as a 'Limit Access' user in FortiCare.