Monitoring antivirus/UTM database versions

Forum|Forum|10 years ago
April 11, 2016
2 replies
4919 views

Hey guys,

Wondering if anyone out there has ever set up something where they monitor the database version of Antivirus or any UTM service for example?

Could this be done through SNMP?

Thanks

Antivirus Engine

emnoc

New Member

Yes you can do that but it depends on fortiOS version, IIRC earlier items didn't support the OID

fgsysVersionAv

1.3.6.1.4.1.12356.101.4.2.1

e.g

iso.3.6.1.4.1.12356.101.4.2.1.0 = STRING: "16.00560(2012-10-19 08:31)"

Give it a try .

Curious: Why do you need to monitor the AV database.? Are you writing any nagios health checks?

dnamzaAuthor

New Member

Hey emnoc,

we’re managing a few hundred fortigates and recently there was an issue where and intrusion was found but wasn’t detected by the fortigate as the IPS signatures wasn’t updated.so we’re trying to figure out a way where we could monitor each UTM database version of each device.

Sign up

Login with SSO

Login to the community

Login with SSO