Configuring Fortigates to get Fortiguard update from FMG? how?

Question

Hi

We're running Fortigates with v5.2.x and FMG 5.2.1.

How do you tell a fortigate to check FMG for Fortiguard updates before going to the proper Fortiguard Service Service?

The fortiOS manual say

config system central-management
 set fortimanager-fds-sigupdate-override enable
 set sig-update-server-1 10.10.10.10
 set sig-update-server-2 20.20.20.20
 set sig-update-server-3 30.30.30.30
end

But none of these commands actually exist in the CLI.

I've seen other websites stating run "set fortimanager-fds-override enable" but this doesn't exist anymore.

AndreaSoliva · Answer

Hi

even I have to say I do not work with 5.2 at the moment because it is too buggy for me I would say following:

config system central-management set mode normal set type fortimanager set fmg "3.3.3.3" #set fmg-source-ip 0.0.0.0 set schedule-config-restore enable set schedule-script-restore enable set allow-push-configuration enable set allow-pushd-firmware enable set allow-remote-firmware-upgrade enable set allow-monitor enable #set serial-number set vdom root set enc-algorithm default config server-list edit 1 set server-type upate server-address 0.0.0.0 end end

The config which points the FGT to FMG is the "config server list". Again I'm not sure but it is visible in this way for me. There is also a addtional command which should be probably disable which means:

include-default-servers {enable | disable} Enable or disable inclusion of public FortiGuard servers in the override server list.

Because this command enables default FortiGuard server etc. I would recommend to disable the stuff because you do not want to use FortiGuard.

Hope this helps

have fun

Andrea

Sign up

Login with SSO

Login to the community

Login with SSO