Description
This article describes the procedure to update the botnet licenses.
Scope
FortiGate.
Solution
UTM licenses are registered in the Fortinet support portal.
Once registered and applied to the FortiGate, the licenses appear as registered in the FortiGate GUI.
If the registered licenses still do not appear, force a license update with the following CLI command:
execute update-now
If licenses are still not getting updated, apply the DNS filter profile to the IPv4 policy to update the botnet license as needed.
Now, ensure the traffic is triggering the IPV4 policy.
Afterwards, the botnet licenses will be updated.
Follow the steps below to update the botnet licenses (instructions are provided for both the GUI and CLI):
config firewall policy
edit 5
set name "test botnet"
set uuid 724fc394-4339-51ea-de36-49446f416408
set srcintf "port2"
set dstintf "port3"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set utm-status enable
set ssl-ssh-profile "certificate-inspection"
set dnsfilter-profile "default"
set nat enable
next
end
