Fortinet black logo

FortiSOAR™ OS Update Process and Security Fixes

Copy Link
Copy Doc ID d8d414c5-fb7f-11ec-bb32-fa163e15d75b:749719
Download PDF

FortiSOAR™ OS Update Process and Security Fixes

FortiSOAR™ OS Update Process

The FortiSOAR™ 6.4.4 Security Patch delivers updated OS packages for the 6.4.4 release. This document provides you with the information you need about how you can get these updates without the need to upgrade FortiSOAR™.

FortiSOAR™ OS update process includes the following:

FortiSOAR™ CentOS 7 update server

Whenever CentOS publishes an important OS update for CentOS, an announcement is made using the CentOS-announce mailing list. The FortiSOAR™ engineering team is subscribed to this mailing list. Once a new update is available, FortiSOAR™ Engineering first tests these updates on a FortiSOAR™ Virtual Appliance by performing vulnerability scan using Nessus™. If no reported vulnerabilities are seen sanity testing is done for stability and regression. After confirming that the update is safe, updates are pushed to the FortiSOAR™ CentOS 7 update server (update.cybersponse.com).

FortiSOAR™ OS updates

Before release, FortiSOAR™ is updated with the latest updates from the CentOS mirror servers. A FortiSOAR™ customer automatically receives an OS update when they upgrade to the latest FortiSOAR™.

If a customer needs to update CentOS 7 without upgrading the FortiSOAR™ product itself, they can do the following:

  1. Ensure that update.cybersponse.com is reachable from your VM.
    If you connect using a proxy, ensure that you set the proxy in the /etc/wgetrc, /etc/profile, and yum.conf files. This is required to download the OS updates file.
  2. SSH to your FortiSOAR™ 6.4.4 VM and log in as a root user.
  3. Download the OS update file (security-update-fortisoar-6.4.4.bin) for 6.4.4 by running the following command:
    # wget https://update.cybersponse.com/6.4.4/security-update-fortisoar-6.4.4.bin
    Note: If your instance can connect to update.cybersponse.com using only a proxy, then ensure that the proxy is set in the /etc/wgetrc file.
    For example:
    use_proxy=yes
    http_proxy=<proxy_server_ip:port>
    https_proxy=<proxy_server_ip:port>
  4. Run the security-update-fortisoar-6.4.4.bin file to apply the security patch on your 6.4.4 system:
    # sh security-update-fortisoar-6.4.4.bin
  5. Reboot your host post-upgrade, if directed by the script.

FortiSOAR™ OS Update Process and Security Fixes

FortiSOAR™ OS Update Process

The FortiSOAR™ 6.4.4 Security Patch delivers updated OS packages for the 6.4.4 release. This document provides you with the information you need about how you can get these updates without the need to upgrade FortiSOAR™.

FortiSOAR™ OS update process includes the following:

FortiSOAR™ CentOS 7 update server

Whenever CentOS publishes an important OS update for CentOS, an announcement is made using the CentOS-announce mailing list. The FortiSOAR™ engineering team is subscribed to this mailing list. Once a new update is available, FortiSOAR™ Engineering first tests these updates on a FortiSOAR™ Virtual Appliance by performing vulnerability scan using Nessus™. If no reported vulnerabilities are seen sanity testing is done for stability and regression. After confirming that the update is safe, updates are pushed to the FortiSOAR™ CentOS 7 update server (update.cybersponse.com).

FortiSOAR™ OS updates

Before release, FortiSOAR™ is updated with the latest updates from the CentOS mirror servers. A FortiSOAR™ customer automatically receives an OS update when they upgrade to the latest FortiSOAR™.

If a customer needs to update CentOS 7 without upgrading the FortiSOAR™ product itself, they can do the following:

  1. Ensure that update.cybersponse.com is reachable from your VM.
    If you connect using a proxy, ensure that you set the proxy in the /etc/wgetrc, /etc/profile, and yum.conf files. This is required to download the OS updates file.
  2. SSH to your FortiSOAR™ 6.4.4 VM and log in as a root user.
  3. Download the OS update file (security-update-fortisoar-6.4.4.bin) for 6.4.4 by running the following command:
    # wget https://update.cybersponse.com/6.4.4/security-update-fortisoar-6.4.4.bin
    Note: If your instance can connect to update.cybersponse.com using only a proxy, then ensure that the proxy is set in the /etc/wgetrc file.
    For example:
    use_proxy=yes
    http_proxy=<proxy_server_ip:port>
    https_proxy=<proxy_server_ip:port>
  4. Run the security-update-fortisoar-6.4.4.bin file to apply the security patch on your 6.4.4 system:
    # sh security-update-fortisoar-6.4.4.bin
  5. Reboot your host post-upgrade, if directed by the script.