Technical Note: CLI command to confirm if FortiGate has received latest package from FortiManager

[takizuki]

Description

This article describes how to confirm if a managed FortiGate device has received the latest package from FortiManager.

Solution

Use the following command and look at the values in the status column.  In this example two packages still have the status of pending.

FMG200D # diagnose fmupdate show-dev-obj

DEVICE(SN:FW90DP3Z1xxxxxxx):
ID                 Status      DeviceVer    ServerVer    PreferVer    License     LicenseType    Description  
--                 ------      ---------    ---------    ---------    -------     -----------    -----------
05004000AVDB00201  pending     00047.00131  00047.00132  00000.00000  valid       APMS:AVDB      FGT AVDB 
05004000AVDB00701  pending     00047.00131  00047.00132  00000.00000  valid       APMS:AVDB      FGT ETDB.High
05004000AVEN01900  up-to-date  00005.00239  00005.00239  00000.00000  valid       APMS:AVDB      FGT FOSv5 ARM AVEN 
05004000CIDB00000  up-to-date  00001.00059  00001.00059  00000.00000  valid       FMWR           Client ID DB  
05004000CRDB00000  up-to-date  00001.00005  00000.00000  00000.00000  valid       
05004000FFDB00300  up-to-date  00002.00937  00002.00692  00000.00000  valid       FMWR           FGT FortiFlowDB
05004000FFDB00400  up-to-date  00002.00937  00002.00692  00000.00000  valid       FMWR           FGT FortiFlowDB
05004000FLDB00201  up-to-date  00046.00874  00046.00874  00000.00000  valid       APMS:AVDB      FGT FlowDB 
05004000FLEN02200  up-to-date  00003.00310  00003.00310  00000.00000  valid       APMS:AVDB      Flow/IPS ARM Engine
05004000IPGE00000  up-to-date  00001.00064  00001.00064  00000.00000  valid       FMWR           IP Geo DB    
05004000IRDB00101  up-to-date  00003.00387  00003.00387  00000.00000  valid       APMS:AVDB      IP reputationDB FGT
05004000MUDB00102  up-to-date  00001.00657  00001.00657  00000.00000  valid       FMWR           Malicious URL Defini
05004000NIDS02202  up-to-date  00011.00148  00011.00148  00000.00000  valid       APMS:NIDS      Attack Definitions
05004000UWDB00100  up-to-date  00001.00687  00001.00687  00000.00000  valid       FMWR           URL Whitelst DB 

The possible status values are:

• "up-to-date": The FortiGate has received the latest package.
• "never Updated": The FortiGate have never requested or received the package.
• "problem": The FortiGate missed the scheduled query, or did not correctly receive the latest package.
• "unknown": The FortiGate's status is not correctly known.
• "pending": The FortiGate has older version than FortiManager due to acceptable reason (such as a scheduled update).

To perform an immediate update execute "execute update-now" on  the FortiGate.

FMG200D # diagnose fmupdate show-dev-obj

DEVICE(SN:FW90DP3Z1xxxxxxx):
ID                 Status      DeviceVer    ServerVer    PreferVer    License     LicenseType    Description   
--                 ------      ---------    ---------    ---------    -------     -----------    ----------- 
05004000AVDB00201  up-to-date  00047.00132  00047.00132  00000.00000  valid       APMS:AVDB      FGT AVDB
05004000AVDB00701  up-to-date  00047.00132  00047.00132  00000.00000  valid       APMS:AVDB      FGT ETDB.High
05004000AVEN01900  up-to-date  00005.00239  00005.00239  00000.00000  valid       APMS:AVDB      FGT FOSv5 ARM AVEN 
05004000CIDB00000  up-to-date  00001.00059  00001.00059  00000.00000  valid       FMWR           Client ID DB  
05004000CRDB00000  up-to-date  00001.00005  00000.00000  00000.00000  valid                                 
05004000FFDB00300  up-to-date  00002.00937  00002.00692  00000.00000  valid       FMWR           FGT FortiFlowDB
05004000FFDB00400  up-to-date  00002.00937  00002.00692  00000.00000  valid       FMWR           FGT FortiFlowDB
05004000FLDB00201  up-to-date  00046.00874  00046.00874  00000.00000  valid       APMS:AVDB      FGT FlowDB    
05004000FLEN02200  up-to-date  00003.00310  00003.00310  00000.00000  valid       APMS:AVDB      Flow/IPS ARM Engine
05004000IPGE00000  up-to-date  00001.00064  00001.00064  00000.00000  valid       FMWR           IP Geo DB
05004000IRDB00101  up-to-date  00003.00387  00003.00387  00000.00000  valid       APMS:AVDB      IP reputationDB FGT
05004000MUDB00102  up-to-date  00001.00657  00001.00657  00000.00000  valid       FMWR           Malicious URL Defini
05004000NIDS02202  up-to-date  00011.00148  00011.00148  00000.00000  valid       APMS:NIDS      Attack Definitions 
05004000UWDB00100  up-to-date  00001.00687  00001.00687  00000.00000  valid       FMWR           URL Whitelst DB  

All entries now show with a status of up-to-date.