FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
sharmanpreet
Staff & Editor
Staff & Editor
Article Id 424680

Description


This article explains how to apply hotfix to EMS v7.4.4+ deployed using the VM appliance.

 

Scope 

 

FortiClient EMS v7.4.4+.

 

Solution:

 

 

  1. In this example, an OpenSSH Server is used on Windows. To install OpenSSH on Windows, navigate to Settings -> System -> Optional Features -> View Features -> See available features -> OpenSSH Server -> Add in the FortiClient EMS GUI.

 


Windows_OpenSSH_Server_1.png

 

 

  1. The service sshd is added after installing OpenSSH Server; make sure it is running. Refer to the screenshots below. The root directory will be C:\users\<username>.

 

 

Starting_OpenSSH_Server.png

 

 

  1. In this example user: sfuser is logged in while the OpenSSH is running. So, root directory will be C:\users\sfuser\
  2. Another folder can be created inside this directory, such as C:\users\sfuser\ems_hotfix\ in this example.

 

 

hotfix_zip_in_windows.png

 

  1. Hotfixing the application is a two-step process, as described below:

 

  1. Copy the hotfix .zip file to EMS VM.
execute scp --read --local.file ems_hotfix26.zip --remote.file /Users/sfuser/ems_hotfix/ems_hotfix_26.zip --remote.ip 10.20.20.101 --remote.user sfuser --remote.password @@@@@@@@@

 

For an explanation of parameters, see emscli execute scp.

 

Expected output when EMS Hotfix .zip copy to EMS VM is successful:

 

Hotfix_copied.png

 

  1. Applying the hotfix:

 

execute hotfix --apply ems_hotfix26.zip

 

For an explanation of the command parameters, see execute hotfix.

 

Expected output of hotfix apply command:

 

hotfix_applied.png

 

  1. To view all hotfixes that have been applied or attempted before (failed or reverted):
execute hotfix --list

 

Expected output of hotfix list command:

 

hotfix_list.png