FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
SAJUDIYA
Staff
Staff
Article Id 340842
Description This article describes that the application signature is missing from the application control profile, and it is not possible to add it even after upgrading or rebooting the device.
Scope FortiGate.
Solution

The issue is with the old database, which does not contain the TikTok signature (for this example), and needs to be upgraded the database.

 

no tiktok signature.PNG

 

  1. Verify the signature last update, which shows below Dec 1, 2015:

 

diagnose autoupdate versions | grep Application -A 8
Application Definitions
---------
Version: 6.00741 signed                            <-- Old application signature database version.
Contract Expiry Date: Sun May 9 2027
Last Updated using manual update on Tue Dec 1 02:30:00 2015
Last Update Attempt: n/a
Result: Updates Installed

 

  1. Try to update the FortiGuard server manually as below and re-verify:

 

diagnose debug application update -1
diagnose debug enable
execute update-now

 

The updated application signature should be visible:

 

diagnose autoupdate versions | grep Application -A 8
Application Definitions
---------
Version: 28.00861 signed                       <-- Latest application signature database version.
Contract Expiry Date: Fri Feb 13 2026
Last Updated using manual update on Wed Sep 11 08:08:55 2024
Last Update Attempt: Wed Sep 11 11:15:23 2024
Result: No Updates

 

tiktok appear.PNG

 

If not updating, make sure that the Application Control profile is enabled under any of the firewall policies.

 

  1. If the FortiGuard server cannot update, manually upload the latest application signature database using the link below:

Technical Tip: How To Upgrade Application Control Definitions Manually


The official FortiGuard Labs resource list for the latest updates in the signature databases: Application Control Service.

 

Related article:

Technical Tip: Application Control Signatures are not updated automatically