| Description | This article describes how to enable the 'antispam-force-off' and 'webfilter-force-off' FortiGuard settings from the FortiManager device database to FortiGate. |
| Scope | FortiManager. |
| Solution |
Currently, the settings for 'antispam-force-off' and 'webfilter-force-off' of FortiGuard settings in local FortiGate are disabled:
To enable the settings from FortiManager, navigate to Device Manager -> Device & Groups -> FortiGate -> CLI Configurations -> System -> FortiGuard. Enable the 'antispam-force-off' and 'webfilter-force-off'.
However, when trying to install the changes to the FortiGate, there are no changes to be pushed:
After the installation is finished, somehow the 'antispam-force-off' and 'webfilter-force-off' settings are automatically disabled:
After further investigation, it was found that the FortiGate is assigned a system template with the 'FortiGuard' setting enabled:
To solve this issue, there are two ways:
Next, navigate to Device Manager -> Device & Groups -> FortiGate -> CLI Configurations -> System -> FortiGuard to enable the 'antispam-force-off' and 'webfilter-force-off' again.
After that, it can be seen that FortiManager is now able to push the 'antispam-force-off' and 'webfilter-force-off' settings:
|
