- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Clarification of FortiManager's "Server Override Mode"
Administration Guide says "Server Override Mode Select Strict (Access Override Server Only) or Loose (Allow Access Other Servers) override mode. " and CLI documentation for "config fmupdate server-override-status" isn't much more helpful.
Clarification of what this does, would be much appreciated.
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yes, it is for below example CLI, you can also config from GUI
config fmupdate av-ips fgt server-override config servlist edit 1 set ip 10.2.2.2 next end set status enable end config fmupdate web-spam fgt server-override config servlist edit 1 set ip 10.2.1.1 next end set status enable end
Thanks
Simon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
for Strict mode, FMG will only connect to the override server IP you configured, and even it fails, FMG will NOT try to connect public FDS server list
for Loose mode, FMG will still connect to public FDS if failed to connect to override server
Thanks
Simon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Simon, thanks.. Your response is only in reference to override servers configured using "config fmupdate av-ips fgt server-override" and "config fmupdate web-spam fgt server-override"?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yes, it is for below example CLI, you can also config from GUI
config fmupdate av-ips fgt server-override config servlist edit 1 set ip 10.2.2.2 next end set status enable end config fmupdate web-spam fgt server-override config servlist edit 1 set ip 10.2.1.1 next end set status enable end
Thanks
Simon
![](/skins/images/EC12350B26E3A30E8BDB0075C9F4DA72/responsive_peak/images/icon_anonymous_message.png)