Fortinet black logo

Upgrading FortiSOAR using the Offline Repository

Upgrading FortiSOAR using the Offline Repository

IMPORTANT: Upgrade from FortiSOAR v7.3.0 onwards fails if your FortiSOAR instance is behind proxy servers or you are upgrading FortiSOAR using offline repositories that do not have access to https://mirrors.rockylinux.org, and therefore the upgrade script is unable to connect to https://mirrors.rockylinux.org to upgrade the rocky linux repo files. To resolve this issue, run setup-environment.bin as follows:

  1. If you are using your private repository to install or upgrade FortiSOAR, then use the following command to export the "custom_yum_url" variable before running the setup-environment.bin script:
    export custom_yum_url=<"custom_yum_url_name">
    For example, export custom_yum_url="offline-repo.fortisoar.in"
    Note: You do not need to run this step for FortiSOAR instances behind proxy servers, etc.
  2. Download the script setup-environment.bin from https://repo.fortisoar.fortinet.com/fortisoar/scripts/setup-environment.bin
  3. Copy the script to your FortiSOAR instance.
  4. Login as a 'root' user.
  5. Run setup-environment.bin with its mandatory 'version' parameter that specifies the version of FortiSOAR to which the user wants to upgrade. For example:
    sh setup-environment.bin -v 7.4.1
    sh setup-environment.bin --version 7.4.1

Now, you can upgrade your instance as follows:

  1. Ensure that the offline repository host is accessible from the FortiSOAR appliance and ensure that your ssh session does not timeout, run the tmux command:
    [root@localhost ~]# tmux
  2. If you are using your private repository to install or upgrade FortiSOAR, then use the following command to export the "custom_yum_url" variable before running the fresh install or upgrade script:
    export custom_yum_url=<"custom_yum_url_name">
  3. Download the upgrade installer for FortiSOAR7.4.1 using the following command:
    [root@localhost ~]# wget https://<offline repo>/7.4.1/upgrade-fortisoar-7.4.1.bin
  4. To upgrade to FortiSOAR7.4.1, run the following command as a root user:
    [root@localhost ~]# sh upgrade-fortisoar-7.4.1.bin
    If you have not deployed an SSL certificate on your offline repo or you have a self-signed certificate deployed on your offline repo, then run the following command on plain Rocky Linux or RHEL system, to ignore the SSL check while upgrading FortiSOAR:
    [root@localhost ~]# sh upgrade-fortisoar-7.4.1.bin --ignore-ssl-check

Upgrading FortiSOAR using the Offline Repository

IMPORTANT: Upgrade from FortiSOAR v7.3.0 onwards fails if your FortiSOAR instance is behind proxy servers or you are upgrading FortiSOAR using offline repositories that do not have access to https://mirrors.rockylinux.org, and therefore the upgrade script is unable to connect to https://mirrors.rockylinux.org to upgrade the rocky linux repo files. To resolve this issue, run setup-environment.bin as follows:

  1. If you are using your private repository to install or upgrade FortiSOAR, then use the following command to export the "custom_yum_url" variable before running the setup-environment.bin script:
    export custom_yum_url=<"custom_yum_url_name">
    For example, export custom_yum_url="offline-repo.fortisoar.in"
    Note: You do not need to run this step for FortiSOAR instances behind proxy servers, etc.
  2. Download the script setup-environment.bin from https://repo.fortisoar.fortinet.com/fortisoar/scripts/setup-environment.bin
  3. Copy the script to your FortiSOAR instance.
  4. Login as a 'root' user.
  5. Run setup-environment.bin with its mandatory 'version' parameter that specifies the version of FortiSOAR to which the user wants to upgrade. For example:
    sh setup-environment.bin -v 7.4.1
    sh setup-environment.bin --version 7.4.1

Now, you can upgrade your instance as follows:

  1. Ensure that the offline repository host is accessible from the FortiSOAR appliance and ensure that your ssh session does not timeout, run the tmux command:
    [root@localhost ~]# tmux
  2. If you are using your private repository to install or upgrade FortiSOAR, then use the following command to export the "custom_yum_url" variable before running the fresh install or upgrade script:
    export custom_yum_url=<"custom_yum_url_name">
  3. Download the upgrade installer for FortiSOAR7.4.1 using the following command:
    [root@localhost ~]# wget https://<offline repo>/7.4.1/upgrade-fortisoar-7.4.1.bin
  4. To upgrade to FortiSOAR7.4.1, run the following command as a root user:
    [root@localhost ~]# sh upgrade-fortisoar-7.4.1.bin
    If you have not deployed an SSL certificate on your offline repo or you have a self-signed certificate deployed on your offline repo, then run the following command on plain Rocky Linux or RHEL system, to ignore the SSL check while upgrading FortiSOAR:
    [root@localhost ~]# sh upgrade-fortisoar-7.4.1.bin --ignore-ssl-check