Skip to main content
DanNSits
Explorer III
Jan 20, 2023 3:03 PM UTC
Solved

FortiGate IPS update outdated

My newly installed FortiGate shows outdated IPS Definitions, IPS Engine and Malicious URLs.

image.png

The update servers can be reached. Do I miss a service entitlement?

image.png

Status dashboard looks good:

image.png

Any suggestions how to troubleshoot this?

I already tried a reboot and manual license import.

abarushka
abarushkaAnswer
Staff
Jan 20, 2023 3:25 PM UTC

Hello,

 

I can see that some databases are updated (i.e. botnet) while some are not (i.e. IPS). Normally if database is not used, it won't be updated. I would recommend to create testing firewall policy with IPS and check whether "IPS definition" database will be updated.

2 replies

abarushka
Staff
abarushkaAnswer
Staff
Jan 20, 2023 3:25 PM UTC

Hello,

 

I can see that some databases are updated (i.e. botnet) while some are not (i.e. IPS). Normally if database is not used, it won't be updated. I would recommend to create testing firewall policy with IPS and check whether "IPS definition" database will be updated.

DanNSits
DanNSitsAuthor
Explorer III
Jan 21, 2023 12:55 PM UTC

Thanks, that worked.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT