Technical Tip: How to push application control package update from air-gapped FortiManager to air-gapped FortiGate

[tnesh]

Description	This article describes how to push application control package updates from air-gapped FortiManager to air-gapped FortiGate.
Scope	FortiManager & FortiGate.
Solution	Note: Both FortiManager and FortiGate are in an air-gapped network. Steps: Make sure FortiGate and FortiManager are configured correctly for FortiGate using FortiManager as the local FortiGuard server: Technical Tip: FortiGate configuration for using FortiManager as local FDS Download the correct application control package from the Support Portal (https://support.fortinet.com/). Upload the application control package file to FortiManager -> FortiGuard -> Settings -> Upload Options for FortiGate/FortiMail -> Packages and Database -> Upload. Verify the application package is successfully uploaded into FortiManager: FortiManager -> FortiGuard -> Packages -> uncheck 'Show Used Object Only'. Make sure to enable 'AntiVirus and IPS Service' under FortiManager -> FortiGuard -> Settings -> Enable AntiVirus and IPS Service -> FortiGate -> <select correct version>. In FortiGate, make sure there is at least one policy with an 'Application Control' security profile enabled: Run the following CLI command in FortiGate to perform the manual update: FGT # diag debug application update 255 FGT # diag debug en FGT # exe update-now       Run the following CLI command in FortiGate to check the FortiGate package version: FGT # diag autoupdate versions Sample result: FortiGate package version before update: FGT # diag autoupdate versions . <truncated> . Application Definitions --------- Version: 6.00741 signed Contract Expiry Date: Wed Aug 21 2024 Last Updated using manual update on Tue Dec 1 02:30:00 2015 Last Update Attempt: n/a Result: Updates Installed . <truncated> . FortiGate debug output: FGT # diag debug application update 255 FGT # diag debug en FGT # exe update-now . <truncated> . upd_install_pkg[1435]-FLEN076 is up-to-date upd_install_pkg[1461]-APDB001(appdb) installed successfully upd_install_pkg[1461]-APDB051(wapp) installed successfully upd_install_pkg[1435]-FMWP001 is up-to-date . <truncated> . FortiGate package version after update: FGT # diag autoupdate versions . <truncated> . Application Definitions --------- Version: 27.00783 signed Contract Expiry Date: Wed Aug 21 2024 Last Updated using manual update on Tue Dec 1 02:30:00 2015 Last Update Attempt: Mon May 13 22:27:06 2024 Result: Updates Installed . <truncated> . Related article: Technical Tip: How to configure FortiAnalyzer/FortiManager to use FortiManager as a FortiGuard serve...