Hi!
Cannot update application signatures (apdb) via ftp and tftp
ISDB and IPS signatures update successfully. FortiOS versions 6.0.6 and 6.0.12. Fortigate 501E
(global) # execute restore other-objects ftp ffdb.pkg
This operation will overwrite the current other objects!
Do you want to continue? (y/n)y
Please wait...
Connect to ftp server ...
Get other objects from ftp server OK.
(global) # execute restore other-objects ftp apdb.pkg
This operation will overwrite the current other objects!
Do you want to continue? (y/n)y
Please wait...
Connect to ftp server ...
Get other objects from ftp server OK.
(global) # diagnose autoupdate versions | grep -A 7 Internet
Internet-service Database Apps
---------
Version: 7.03208
Contract Expiry Date: n/a
Last Updated using manual update on Tue May 23 12:55:18 2023
Last Update Attempt: Fri Mar 18 16:53:14 2022
Result: Unauthorized
Internet-service Database Maps
---------
Version: 7.03208
Contract Expiry Date: n/a
Last Updated using manual update on Tue May 23 12:55:18 2023
Last Update Attempt: Fri Mar 18 16:53:14 2022
Result: Unauthorized
(global) # diagnose autoupdate versions | grep -A 7 Application
Application Definitions
---------
Version: 20.00274
Contract Expiry Date: Sun Mar 13 2022
Last Updated using scheduled update on Fri Mar 11 00:52:26 2022
Last Update Attempt: Tue Mar 15 04:52:26 2022
Result: No Updates
(global) # execute restore other-objects tftp apdb.pkg
This operation will overwrite the current other objects!
Do you want to continue? (y/n)y
Please wait...
Connect to tftp server ...
Get other objects from tftp server OK.
(global) # diagnose autoupdate versions | grep -A 7 Applicatio
Application Definitions
---------
Version: 22.00425
Contract Expiry Date: Sun Nov 6 2022
Last Updated using scheduled update on Sat Nov 5 10:50:34 2022
Last Update Attempt: Mon Nov 7 02:49:22 2022
Result: No Updates
Имя: apdb_OS6.0.0_23.00555.APDB.pkg
Размер: 278824 байтов (272 KiB)
SHA256: 120519C71AD2F6563E19A355A33955637AD552446B873B0D2B8A12AB459D3F27
Solved! Go to Solution.
AFAIK, Only AV and IPS signatures can be updated as such.
Updating databases should be done from FortiGuard or FortiManager, and manual updates are normally failing from ftp/tftp (like ISDB which surely does not work as such).
Assuming you are already running FortiOS 7.0 (at least), feel free to open a case to addres this to developers. It may have been disabled, but should be checked.
The error you show: "Result: Unauthorized" may also show a problem with the FTP server
check in a separate SSH session "diag debug update -1" while you run the command to upload the file from a server
AFAIK, Only AV and IPS signatures can be updated as such.
Updating databases should be done from FortiGuard or FortiManager, and manual updates are normally failing from ftp/tftp (like ISDB which surely does not work as such).
Assuming you are already running FortiOS 7.0 (at least), feel free to open a case to addres this to developers. It may have been disabled, but should be checked.
The error you show: "Result: Unauthorized" may also show a problem with the FTP server
check in a separate SSH session "diag debug update -1" while you run the command to upload the file from a server
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1740 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.