Technical Tip: Empty output from 'diagnose wad dev-vuln query' command

Description

This article describes that the 'diagnose wad dev-vuln query' is a command that can be used on FortiGate to query the FortiGuard database for vulnerability information.

Scope

FortiGate, Virtual Patching.

Solution

Below are some examples to query FortiOS 7.0.3, 7.2.8, 7.4.4:

diagnose wad dev-vuln query vendor=fortinet&version=7.0.3&product=fortios

diagnose wad dev-vuln query vendor=fortinet&version=7.2.8&product=fortios

diagnose wad dev-vuln query vendor=fortinet&version=7.4.4&product=fortios

After running this command multiple times to test different FortiOS versions, it is possible to notice that the output is always empty:

To be able to retrieve the outputs, additionally, it is necessary to run 'diagnose debug enable'.