Fortinet Fortigate-5000 series Administration Manual page 170

FortiGuard Center
170
Figure 93: Example network: Push updates through a NAT device
Internet
NAT Device
Push Updates
Internal Network
General procedure
Use the following steps to configure the FortiGate unit on the internal network and
the NAT device so that the FortiGate unit on the internal network can receive push
updates:
1 Register and license the FortiGate unit on the internal network so that it can
receive push updates.
2 Configure the FortiGuard Center of the FortiGate unit on the internal network.
• Allow push updates
• Add an override push update IP. Usually this would be the IP address of the
external interface of the NAT device
• If required, change the override push update port
3 Add a port forwarding virtual IP to the NAT device.
• Set the external IP address of the virtual IP to match the override push update
IP. Usually this would be the IP address of the external interface of the NAT
device.
4 Add a firewall policy to the FortiGate NAT device that includes the port forwarding
virtual IP.
To configure the FortiGuard Center of the FortiGate unit on the internal
network
1 Go to System > Maintenance > FortiGuard Center.
2 Select Allow Push Update.
FDN
Server
FortiGate Version 3.0 MR4 Administration Guide
System Maintenance
01-30004-0203-20070102