Fortinet black logo

New Features and Enhancements

New Features and Enhancements

Enhanced User Experience while building Playbooks

  • Enhanced the usability and searchability of the 'Dynamic Values' window in the Playbook Designer. Ease of usability includes displaying of 'keys' instead of the complete Jinja expression in fields that use the Dynamic Values options, by introducing a 'Simplified Expression View' setting. This setting is enabled by default, which means that the playbook designer renders tag-based simplified expressions instead of the complete Jinja expressions. However, if your administrator disables this setting, then complete Jinja expressions are displayed in the playbook designer.
  • Augmented the usability of the step output data because of an option that allows users to use the last run data.
  • Introduced "Reference Blocks," a useful set of references for users to make the process of building playbooks easier. Using reference blocks, users can get contextual aid while building playbooks, including relevant samples and help references.

FortiSOAR High Availability Support on Dockers

  • Added support for FortiSOAR High Availability (HA) clusters on multiple Docker hosts providing improved uptime, scalability, load balancing, fault tolerance, and simplified management for your FortiSOAR Dockers.

Added playbook suggestions based on prior workflows performed on similar records

  • Added a 'Playbook Suggestions' section to the 'Recommendations' pane of the detail view of a record so that analysts can view the workflow that is most likely to be executed on a given record in a particular order based on the previous actions on related records. This helps new analysts quickly become familiar with the many workflow processes that the organization uses for a particular record, for example, an alert record.

Added support to clone playbook collections

  • Added the ability to clone playbook collections. Earlier, since this was not supported, cloning sample playbooks from connectors and solution packs which was a recommended process, was a very time-consuming operation.

Improvements in FortiSOAR UI

  • Added support for triggering a Manual Trigger or Reference playbook from the FortiSOAR UI or from a Widget to perform some operations, on pages such as the Dashboard, View Panel, Listing, etc.
  • Added the Last Calendar Month filter that allows you to filter results from the beginning of the last month to the end of the last month.
  • Added pagination to the 'Team' and 'Roles' sections on the "Users" and "Appliances" pages so that the list of teams and roles contains all of the teams and roles.

Enhanced Administration Capabilities

  • Added the "Name" field as the uniqueness constraint for the "Queues" module by default, which mandates users to specify a unique name for each queue. Administrators can choose to modify or remove the uniqueness constraint for the "Queues" module, and can also choose to add fields that serve as the uniqueness constraint for the "Shifts" module.
  • Updated the FortiSOAR Admin CLI (csadm) as follows:
    • Added the forget-node subcommand to the csadm ha command, which can be used to remove the entry of a non-reachable node from your HA cluster.
    • Added the --conf CONFIG_FILE_PATH argument to the clone-db subcommand of the csadm ha command. Use this argument to specify the name and path of the configuration file copied from the primary server.
  • Updated the default logging level for failed playbooks to DEBUG so that users do not need to rerun the playbook to view the exact reason for playbook failures.

  • Optimized the reindexing of Elasticsearch data.

Documentation Enhancements

  • Added the "FortiSOAR Compatibility Matrix" document that you can use to determine the software version compatibility between each FortiSOAR component.
  • Added FAQs to the High Availability chapter in the "Administration Guide"

Built-in Connector and Widget Enhancements

  • Updated multiple built-in connectors such as the FortiSOAR ML Engine Connector, Utilities Connector, etc. For more information on FortiSOAR Built-in connectors, see the "FortiSOAR™ Built-in connectors" article.
  • Added multiple widgets such as Record Distribution widget, CICD Configuration Wizard widget, etc.

New Features and Enhancements

Enhanced User Experience while building Playbooks

  • Enhanced the usability and searchability of the 'Dynamic Values' window in the Playbook Designer. Ease of usability includes displaying of 'keys' instead of the complete Jinja expression in fields that use the Dynamic Values options, by introducing a 'Simplified Expression View' setting. This setting is enabled by default, which means that the playbook designer renders tag-based simplified expressions instead of the complete Jinja expressions. However, if your administrator disables this setting, then complete Jinja expressions are displayed in the playbook designer.
  • Augmented the usability of the step output data because of an option that allows users to use the last run data.
  • Introduced "Reference Blocks," a useful set of references for users to make the process of building playbooks easier. Using reference blocks, users can get contextual aid while building playbooks, including relevant samples and help references.

FortiSOAR High Availability Support on Dockers

  • Added support for FortiSOAR High Availability (HA) clusters on multiple Docker hosts providing improved uptime, scalability, load balancing, fault tolerance, and simplified management for your FortiSOAR Dockers.

Added playbook suggestions based on prior workflows performed on similar records

  • Added a 'Playbook Suggestions' section to the 'Recommendations' pane of the detail view of a record so that analysts can view the workflow that is most likely to be executed on a given record in a particular order based on the previous actions on related records. This helps new analysts quickly become familiar with the many workflow processes that the organization uses for a particular record, for example, an alert record.

Added support to clone playbook collections

  • Added the ability to clone playbook collections. Earlier, since this was not supported, cloning sample playbooks from connectors and solution packs which was a recommended process, was a very time-consuming operation.

Improvements in FortiSOAR UI

  • Added support for triggering a Manual Trigger or Reference playbook from the FortiSOAR UI or from a Widget to perform some operations, on pages such as the Dashboard, View Panel, Listing, etc.
  • Added the Last Calendar Month filter that allows you to filter results from the beginning of the last month to the end of the last month.
  • Added pagination to the 'Team' and 'Roles' sections on the "Users" and "Appliances" pages so that the list of teams and roles contains all of the teams and roles.

Enhanced Administration Capabilities

  • Added the "Name" field as the uniqueness constraint for the "Queues" module by default, which mandates users to specify a unique name for each queue. Administrators can choose to modify or remove the uniqueness constraint for the "Queues" module, and can also choose to add fields that serve as the uniqueness constraint for the "Shifts" module.
  • Updated the FortiSOAR Admin CLI (csadm) as follows:
    • Added the forget-node subcommand to the csadm ha command, which can be used to remove the entry of a non-reachable node from your HA cluster.
    • Added the --conf CONFIG_FILE_PATH argument to the clone-db subcommand of the csadm ha command. Use this argument to specify the name and path of the configuration file copied from the primary server.
  • Updated the default logging level for failed playbooks to DEBUG so that users do not need to rerun the playbook to view the exact reason for playbook failures.

  • Optimized the reindexing of Elasticsearch data.

Documentation Enhancements

  • Added the "FortiSOAR Compatibility Matrix" document that you can use to determine the software version compatibility between each FortiSOAR component.
  • Added FAQs to the High Availability chapter in the "Administration Guide"

Built-in Connector and Widget Enhancements

  • Updated multiple built-in connectors such as the FortiSOAR ML Engine Connector, Utilities Connector, etc. For more information on FortiSOAR Built-in connectors, see the "FortiSOAR™ Built-in connectors" article.
  • Added multiple widgets such as Record Distribution widget, CICD Configuration Wizard widget, etc.