Skip to main content
Ezzat
Visitor III
June 14, 2023
Question

Upgrade 6.7.5 to 7

  • June 14, 2023
  • 17 replies
  • 5649 views

I would like to upgrade FortiSIEM from 6.7.5 to 7, do we have first to upgrade the linux os from centos to rockey or this will already be done when we do the upgrade steps ?

 

    17 replies

    FSM_FTNT
    Staff
    Staff
    June 14, 2023

    You can upgrade from 6.7.5 straight to 7.0.0

    https://docs.fortinet.com/document/fortisiem/7.0.0/upgrade-guide/505373/upgrading-to-fortisiem-7-x-x

     

    FSM 6.7.x runs on Rocky Linux, so there is no migration from CentOS to Rocky needed.

    JohnCheong
    Explorer
    October 16, 2023

    HI,
    I would like to upgrade from version 6.6 to version 7 as well. I believe I just need to do a regular upgrade, but according to the link you shared, it seems very complicated. I'm not sure which steps to follow and which ones I can skip. Is there a simple user guide available for a regular upgrade?

    Secusaurus
    Contributor III
    October 16, 2023

    Hi JohnCheong,

     

    It depends on your setup. If you have NFS or local database, it's just uploading zip, extract, and run FSM upgrade shell.

     

    If you are using Elastic or ClickHouse, you may need to consider other steps as well, that's the reason why this is such a large document. Usually, when you are using one of these databases, you have some experience in these deployments, so it's not that complicated either.

     

    I suppose, you will only need to jump right into Upgrade 6.x Single Node Deployment or Upgrade 6.x Cluster Deployment.

     

    I did not experience any major issues with upgrading in little steps yet, so just note that the upgrade will take some time.

     

    Best,

    Christian

    NSE8 | Fortinet Advanced MSSP Partner
    Ezzat
    EzzatAuthor
    Visitor III
    June 15, 2023

    Thank you

    labsession101
    Visitor III
    October 18, 2023

    @Ezzat @Secusaurus 

    How do you proceed with your collector upgrade?
    is it via  GUI?

    Uploaded the bundle in supervisor
    And upgrade the collector via ADMIN > HEALTH > COLLECTOR HEALTH?

    Thanks

    Secusaurus
    Contributor III
    October 18, 2023

    Yes, you can do it on the interface. On FSM 7.x you can even upload on the GUI.

    You might want to follow this guide here.

     

    Best,

    Christian

     

    NSE8 | Fortinet Advanced MSSP Partner
    Jesisidabuliu
    New Member
    October 19, 2023

    Hi Chris,
    Is the collector image to be uploaded via the GUI the same file that I used to upgrade the Supervisor and worker? The file: FSM_Upgrade_All_7.0.2_build0043.zip.

    premchanderr
    Staff & Editor
    Staff & Editor
    March 19, 2024

    Hi @Jesisidabuliu ,


    There is no option to shutdown workers from GUI. 


    You can use below command to stop processes and then shutdown from worker CLI:

    # phxctl stop

    # shutdown -h now 

    Jesisidabuliu
    New Member
    March 19, 2024

    Hi Prem Chander R,
    Thank you for the reply ... can i use this command instead?
    phtools --STOP ALL 

    and do i need to restart the worker after the upgrade? any command for that?

    premchanderr
    Staff & Editor
    Staff & Editor
    March 19, 2024

    Hi,

     

    Yes you can use phtools command as well. 


    The worker or any FSM node would be automatically rebooted after upgrade completes. 

     

    For anytime you want to reboot a Fortisiem Node, you can use below command:
    # phxctl reboot

    premchanderr
    Staff & Editor
    Staff & Editor
    March 19, 2024

    Hi @Jesisidabuliu , 

    You would need to shutdown the worker, from worker CLI and then begin super upgrade.  

     

    SSH to worker:

    # phtools --stop ALL

    # shutdown -h now

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!