Skip to main content
nael
nael
New Member
April 19, 2021
Question

FortiGate Transparent Mode and FortiGuard Update

  • April 19, 2021
  • 1 reply
  • 2422 views

Hi,

I have installed a FortiGate in Transparent mode, I'm using a reserved ha interface for management.

I need to know how to access to the internet for fortiguard updates using the mgmt interface (port 3 in this case)

 

FGT-1 (ha-mgmt-interfaces) # edit 1 FGT-1 (1) # get id                  : 1 interface           : port3 dst                 : 0.0.0.0 0.0.0.0 gateway             : 192.168.30.254 gateway6            : ::

 

the ping to outside network like 8.8.8.8 for example does not work.

I don't know how to instruct FW to use the port 3 as egress interface.

 

I don't find documentation for similar setup.

please help!

thanks

 

 

    1 reply

    emnoc
    emnoc
    New Member
    April 19, 2021

    What did you set up for the manageip in the global settings?

     

    config system settings

        set opmode trans

        set manageip x.x.x.x/24

        set gateway a.b.c.d

        end

     

    That address is what's used for fortiguard updates. Can you ping fortiguard from that address ? have you allowed the require services thru any upstream device 

     

    ( these should be anycast address )

    execute ping service.fortiguard.net

    execute ping update.fortiguard.net

     

    ken Felix

     

    Terms & ConditionsAccessibility statement