FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
This article describes how to migrate a FortiSOAR On-Premises configuration to the Cloud environment.
Scope
FortiSOAR v7.x.
Solution
Pre-requisites:
The FortiSOAR instance is already provisioned on the FortiSOAR Cloud Portal.
Ensure sufficient disk space in both directories:
/home/csadmin (where the backup will be saved) must have at least twice the size of the backup file available.
/var/lib/pgsql (where the backup will be restored).
Agent connectivity will be interrupted during the migration process. Agent configurationmust be updated by running the newly downloaded agent installer from the FortiSOAR Cloud instance. Ensure access to the agentmachines.
Create an AWS instance with a public IP address enabled. Configure security groups to allow inbound SSH (port 22) from the FortiSOAR Cloud Instance’s public IP. To get the public IP address, use the following command:
curl ifconfig.me
Or: Use Amazon S3 instead of an AWS Instanceto share the backup file via a pre-signed URL, which allows secure, time-limited access without requiring inbound SSH connections. For details, see the Sharing objects with presigned URLs article.
FortiSOAR Cloud Migration Steps:
Upload the FortiSOAR backup file to the AWS/Amazon S3 instance.
SSH into the FortiSOAR Cloud Instance using 'csadmin' and then switch to the 'root' user.
Install openssh-clients on the FortiSOAR instance (if not already installed).
Download the backup file from the AWS instance or the S3 pre-signed URL to the FortiSOAR Cloud instance using scp or wget, respectively.
Verify the hostname of the FortiSOAR Cloud instance and ensure that the hostname is stored for later use.
Run the restore process on the FortiSOAR Cloud instance. For information on the restore process, see the FortiSOAR Cloud Deployment Guide.
If the hostname has changed during migration, revert it to the FortiSOAR Cloud instance's hostname (as saved in step 5) using the following command:
csadm hostname --set <hostname>
Log in to the FortiSOAR Cloud UI via the FortiSOAR Cloud Portal.
Select the License Sync button and wait for the license synchronization to complete.
