FortiClient EMS 7.4 - updating linux (unattended-upgrades)

[miciti]

We did implement FortiClient EMS in our company and since we did not have a windows server license to spare we directly went for version 7.4 because it is running on linux.

I did not find any informations on recommendations from FortiNet how to update the linux system.

Does running "unattended-upgrades" in default configuration may break something?

[AEK]

Very good question.

Basically performing "updates" (not OS upgrade) on the Ubuntu server shouldn't impact your FortiClient EMS. But it is always good to take precaution by taking a VM backup before updating the system, just in case.

[futureweb]

I wanted to update ubuntu and get a warning, that you should not do it when support did not tell you. In tutorials, it sais, you have to update it regulary. We use 7.4.5, but the update to newer ems does not update ubuntu I guess. We used the vhdx image. Any source, that states how to do it correct. I mean the warning, only upgrade ubuntu if support tells you is pretty clear not to do it? 

[AEK]

I guess some OS updates may impact EMS.

In case the OS update is for a critical vulnerability then I'd apply it and take a backup before the operation, just in case.

For other updates you should contact support.

[futureweb]

Thanks for your information, but that would mean, that I would need to know that a specific package has a security flaw.

As a small company, this is basically hard to manage, and I did not find any information what the best practice would be to update the OS on the .vhdx that you can download from Fortinet. I assume Fortinet doesn't want separate support cases each time someone wants to update the OS ;)

But yeah, I will reach out to them and ask.