The FortiSOAR 7.0.0 Security Patch delivers updated OS packages for the 7.0.0 release. This document provides you with the information you need about how you can get these updates without the need to upgrade FortiSOAR.
FortiSOAR OS update process includes the following:
Whenever CentOS publishes an important OS update for CentOS, an announcement is made using the CentOS-announce mailing list. The FortiSOAR engineering team is subscribed to this mailing list. Once a new update is available, FortiSOAR Engineering first tests these updates on a FortiSOAR Virtual Appliance by performing vulnerability scan using Nessus™. If no reported vulnerabilities are seen sanity testing is done for stability and regression. After confirming that the update is safe, updates are pushed to the FortiSOAR CentOS 7 update server (update.cybersponse.com).
Before release, FortiSOAR is updated with the latest updates from the CentOS mirror servers. A FortiSOAR customer automatically receives an OS update when they upgrade to the latest FortiSOAR.
If a customer needs to update CentOS 7 without upgrading the FortiSOAR product itself, they can do the following:
- Ensure that update.cybersponse.com is reachable from your VM.
If you connect using a proxy, ensure that you set the proxy in the
yum.conffiles. This is required to download the OS updates file.
- SSH to your FortiSOAR 7.0.0 VM and log in as a root user.
Download the OS update file (
security-patch-update.sh) for 7.0.0 by running the following command:
# wget https://update.cybersponse.com/7.0.0/security-patch-update.sh
Note: If your instance can connect to update.cybersponse.com only using a proxy, then ensure that the proxy is set in the
- Run the
security-patch-update.shfile to apply the security patch on your 7.0.0 system:
- Reboot your host post-upgrade, if directed by the script.