Fortinet FortiGate Series Administration Manual page 325

System Maintenance
Downloading antivirus and IPS updates
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
[Register]
Status Icon
[Version]
[Last update date and
method]
[Date]
In the Antivirus and IPS Options section, you can schedule antivirus and IPS updates,
configure an override server, or allow push updates. You can access these options by
selecting the expand arrow.
The SETUP message that the FortiGate unit sends when you enable push updates
includes the IP address of the FortiGate interface that the FDN connects to. Use the Use
override push IP option when your FortiGate unit is behind a NAT device. The FortiGate
unit sends the FDS the IP and port numbers of the NAT device to the FDS. The NAT
device must also be configured to forward the FDS traffic to the FortiGate unit on port
9443.
For more information, see
Figure 172: AntiVirus and IPS Options section
Expand arrow Allow Push Update Status
Use override server
address
Allow Push Update
Select to register the service. This is displayed in Analysis &
Management Service.
Indicates the status of the subscription service. The icon corresponds
to the availability description.
Gray (Unreachable) – FortiGate unit is not able to connect to service.
Orange (Not Registered) – FortiGate unit can connect, but is not
subscribed to this service.
Yellow (Expired) – FortiGate unit had a valid license that has expired.
Green (Valid license) – FortiGate unit can connect to FDN and has a
registered support contract.
If the Status icon is green, the expiry date is displayed.
The version number of the definition file currently installed on the
FortiGate unit for this service.
The date of the last update and method used for last attempt to
download definition updates for this service.
Local system date when the FortiGate unit last checked for updates
for this service.
"Enabling push updates through a NAT device" on page
Select to configure an override server if you cannot connect to the
FDN or if your organization provides updates using their own
FortiGuard server.
When selected, enter the IP address or domain name of a FortiGuard
server and select Apply. If the FDN Status still indicates no connection
to the FDN, see "Troubleshooting FDN connectivity" on page
Select to allow push updates. Updates are then sent automatically to
your FortiGate unit when they are available, eliminating any need for
you to check if they are available.
Configuring FortiGuard Services
331.
328.
325