When upgrading a FortiAnalyzer High Availability (HA) cluster, the process is managed from the primary unit. The primary unit orchestrates a sequential upgrade to maintain service availability. It first sends the firmware image to all secondary (or slave) units and initiates their upgrade. Once the secondary units have successfully upgraded and rebooted, the primary unit proceeds to upgrade its own firmware. This rolling upgrade methodology ensures that the cluster's logging and reporting services remain operational on the primary unit while the secondary units are offline, minimizing overall downtime for the HA cluster.

A. You can perform the firmware upgrade using only a console connection.

This is incorrect. The firmware upgrade can be initiated from the primary unit's GUI or CLI (via SSH or console), not exclusively through a console connection.

B. All FortiAnalyzer devices will be upgraded at the same time.

This is false. A simultaneous upgrade would cause a complete service outage. The upgrade is performed sequentially—secondaries first, then the primary—to ensure high availability.

C. Enabling uninterruptible-upgrade prevents normal operations from being interrupted during the upgrade.

This is incorrect. The uninterruptible-upgrade setting is a feature for FortiGate HA clusters to maintain traffic flow, not for FortiAnalyzer HA clusters.

1. FortiAnalyzer Administration Guide 7.4.1

Chapter: "High Availability"

Section: "Upgrading the FortiAnalyzer HA cluster"

Page 101.

Quote: "You can upgrade the firmware of a FortiAnalyzer HA cluster from the primary unit GUI. When you upgrade

the primary unit upgrades the firmware of the secondary units first

and then its own firmware." This directly supports the correct answer (D) and refutes option (B).

The guide also details the GUI-based upgrade process

refuting the "console only" claim in option (A).

2. FortiAnalyzer CLI Reference 7.4.1

config system ha section.

This reference confirms the absence of an uninterruptible-upgrade option within the FortiAnalyzer HA configuration commands

demonstrating that option (C) refers to a non-existent feature for this product.