Skip to main content
Contributor
January 15, 2007

Technical Tip: FortiGuard updates fail on download

  • January 15, 2007
  • 0 replies
  • 9723 views
Description This article describes the scenario where FortiGuard updates (push or scheduled) are not always successfully downloaded.
Scope

FortiOS.

Solution

In the event logs, there may be entries seen indicating that the FortiGuard updates were not successful.

The reason for the failure is that there is not enough free memory to perform the updates at that very moment, especially if there is heavy traffic, or if users are downloading big files.

 

To avoid these situations, the following can be done:

  • Disable unused services and IPS signatures to free up memory.
  • Schedule Anti-Virus and IPS updates for off-peak hours such as late evening/early morning or on weekends.

To be able to update the databases manually, the following commands can be used:

 

diagnose debug reset

diagnose debug console time enable

diagnose debug app update -1

diagnose debug enable

execute update-now

 

Leave it to run for a couple of minutes and stop logging with the following command:

 

diagnose debug disable

 

To upgrade the IPSEngine version, refer to Technical Tip: How to manually upgrade the IPS Engine.

 

Related article:

Troubleshooting Tip: 'The system has entered conserve mode' FortiGate log message explanation