Configuring Fortiguard; Updating Antivirus And Ips Signatures - Fortinet FortiGate Series Install Manual

Configuring

Configuring FortiGuard

Updating antivirus and IPS signatures

FortiGate Version 4.0 Desktop Install Guide
01-400-95522-20090501
http://docs.fortinet.com/ • Feedback
You need to configure the Fortinet unit to connect to the FortiGuard Distribution Network
(FDN) to update the antivirus, antispam and IPS attack definitions.
The FDN is a world-wide network of FortiGuard Distribution Servers (FDS). When the
Fortinet unit connects to the FDN, it connects to the nearest FDS. To do this, all Fortinet
units are programmed with a list of FDS addresses sorted by nearest time zone according
to the time zone configured for the Fortinet unit.
Before you can begin receiving updates, you must register your Fortinet unit from the
Fortinet web page. For more information, see
After you have registered your Fortinet unit, you can update antivirus and IPS signatures.
The FortiGuard Center enables you to receive push updates, allow push update to a
specific IP address, and schedule updates for daily, weekly, or hourly intervals.
To update antivirus definitions and IPS signatures
1 Go to System > Maintenance > FortiGuard.
2 Select the expand arrow for AntiVirus and IPS Options to expand the options.
3 Select Update Now to update the antivirus definitions.
If the connection to the FDN is successful, the web-based manager displays a
message similar to the following:
Your update request has been sent. Your database will be updated in
a few minutes. Please check your update page for the status of the
update.
After a few minutes, if an update is available, the System FortiGuard Center page lists
new version information for antivirus definitions. The System Status page also displays
new dates and version numbers for the antivirus definitions. Messages are recorded to the
event log indicating whether or not the update was successful or not.
Note: Updating antivirus definitions can cause a very short disruption in traffic currently
being scanned while the Fortinet unit applies the new signature database. Schedule
updates when traffic is light, for example overnight, to minimize any disruption.
For more information on FortiGuard configuration, see the
Additional configuration
"Register your FortiGate unit" on page
FortiGate Administration
13.
Guide.
27