Technical Tip: How to update the attack definitions

Description

This article describes how to update the attack definitions.

Scope

FortiGate.

Solution

To update the attack definition, follow the steps below:

1. Check the version of the attack definition through below command:
   
   

diagnose autoupdate versions

Attack Definitions
---------
Version: 6.00741 signed
Contract Expiry Date: Mon Mar 2 2026
Last Updated using manual update on Tue Dec 1 02:30:00 2015
Last Update Attempt: n/a
Result: Updates Installed

2. Execute the command below to update the attack definition:

execute update-now

Execute below commands if there is a need for visibility related to the actions performed by the above command:

diagnose debug application update -1

diagnose debug console timestamp enable

diagnose debug enable

Execute below commands to disable and reset the above debug:

diagnose debug disable

diagnose debug reset

Note: 

For FortiGates without internet access, Attack Definitions can be manually updated. To do so, download the update package from the Service Updates area on the Fortinet Support Portal and upload it to the FortiGate device.

3. Execute the following command again to check if the update was performed:

diagnose autoupdate versions

Attack Definitions
---------
Version: 33.00013 signed
Contract Expiry Date: Mon Mar 2 2026
Last Updated using manual update on Tue May 27 16:59:47 2025
Last Update Attempt: n/a
Result: Updates Installed