Technical Tip: How to manually update Antivirus definition on FortiMail

Description

This article describes how to manually update the AV Definition for a FortiMail unit.

Scope

FortiMail.

Solution

1. Log in to the Customer Service & Support web portal (Support), and select the Support -> Service Update.
   
   
2. Select Product: FortiMail, then download the files for Antivirus Definition ('Virus Definition') based on the correct OS version of the device.

3. The current Antivirus Definition version in a FortiMail unit can be checked from either the Web GUI or via CLI.

Web GUI:

Go to System -> FortiGuard -> License -> FortiGuard Service Status.

CLI:

Run the following command and look for 'Virus Definitions'.

MailGW # diagnose autoupdate versions
System Time: 2025-12-17 19:36:41 CET (Uptime: 69d 2h 34m)
AV Engine
---------
Version: 7.00046
Contract Expiry Date: Fri Nov 13 01:00:00 2026
Last Updated using manual update on Tue Dec 9 12:09:31 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates

Virus Definitions
---------
Version: 93.06353
Contract Expiry Date: Fri Nov 13 01:00:00 2026
Last Updated using scheduled update on Wed Dec 17 14:04:16 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates

Extended set
---------
Version: 93.06349
Contract Expiry Date: Fri Nov 13 01:00:00 2026
Last Updated using scheduled update on Sat Dec 13 13:04:25 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates

Extreme set
---------
Version: 93.06290
Contract Expiry Date: Fri Nov 13 01:00:00 2026
Last Updated using scheduled update on Sat Nov 15 11:32:42 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates

AS Rule Set
---------
Version: 7.00676
Contract Expiry Date: Fri Nov 13 01:00:00 2026
Last Updated using scheduled update on Mon Oct 27 11:32:15 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates
heuristic init flag 1
antispam obj 0 version 4.00005(2023-11-27 09:31) cardinals 0
antispam obj 1 version 4.00172(2025-09-02 11:11) cardinals 0
antispam obj 2 version 4.00083(2025-08-25 11:05) cardinals 0
antispam obj 3 version 4.00001(2011-11-29 02:22) cardinals 0
antispam obj 4 version 4.00015(2025-10-24 17:30) cardinals 0
antispam obj 5 version 4.00154(2025-09-02 11:11) cardinals 0
antispam obj 6 version 1.00007(2025-07-15 16:45) cardinals 0
heuristic rule release date 7.676 2025-10-25(17:58)
heuristic rule version 676 decision tree version 4

Internet-service Database
---------
Version: 7.04384
Contract Expiry Date: n/a
Last Updated using scheduled update on Tue Dec 16 09:04:14 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates

IP Geography Database
---------
Version: 3.00310
Contract Expiry Date: n/a
Last Updated using scheduled update on Fri Dec 12 09:04:27 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates

Certificate Bundle
---------
Version: 1.00061
Contract Expiry Date: n/a
Last Updated using scheduled update on Mon Dec 15 19:04:13 2025
Last Update Attempt: Wed Dec 17 19:04:10 2025
Result: No Updates

FDS Address
---------
12.34.97.16:443

4. Update the Antivirus definition through the Web GUI or CLI:

Web GUI, go to: Dashboard -> Status -> License Information.

Select 'Update' and then the file that was previously downloaded from the support site.

Press OK to continue.

In the CLI, run the following command:

execute restore av tftp <filename> <TFTP IP address>

5. Verify that the antivirus definitions are updated by repeating Step 3 and confirming that the displayed version matches the latest loaded definition.