Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
rsaberov43
New Contributor II

Cannot update application signatures (apdb) via ftp and tftp

Hi!

Cannot update application signatures (apdb) via ftp and tftp

ISDB and IPS signatures update successfully. FortiOS versions 6.0.6 and 6.0.12. Fortigate 501E

(global) # execute restore other-objects ftp ffdb.pkg
This operation will overwrite the current other objects!
Do you want to continue? (y/n)y
Please wait...
Connect to ftp server ...
Get other objects from ftp server OK.
(global) # execute restore other-objects ftp apdb.pkg
This operation will overwrite the current other objects!
Do you want to continue? (y/n)y
Please wait...
Connect to ftp server ...
Get other objects from ftp server OK.
(global) # diagnose autoupdate versions | grep -A 7 Internet
Internet-service Database Apps
---------
Version: 7.03208
Contract Expiry Date: n/a
Last Updated using manual update on Tue May 23 12:55:18 2023
Last Update Attempt: Fri Mar 18 16:53:14 2022
Result: Unauthorized
Internet-service Database Maps
---------
Version: 7.03208
Contract Expiry Date: n/a
Last Updated using manual update on Tue May 23 12:55:18 2023
Last Update Attempt: Fri Mar 18 16:53:14 2022
Result: Unauthorized
(global) # diagnose autoupdate versions | grep -A 7 Application
Application Definitions
---------
Version: 20.00274
Contract Expiry Date: Sun Mar 13 2022
Last Updated using scheduled update on Fri Mar 11 00:52:26 2022
Last Update Attempt: Tue Mar 15 04:52:26 2022
Result: No Updates

(global) # execute restore other-objects tftp apdb.pkg
This operation will overwrite the current other objects!
Do you want to continue? (y/n)y
Please wait...
Connect to tftp server ...
Get other objects from tftp server OK.
(global) # diagnose autoupdate versions | grep -A 7 Applicatio
Application Definitions
---------
Version: 22.00425
Contract Expiry Date: Sun Nov 6 2022
Last Updated using scheduled update on Sat Nov 5 10:50:34 2022
Last Update Attempt: Mon Nov 7 02:49:22 2022
Result: No Updates
Имя: apdb_OS6.0.0_23.00555.APDB.pkg
Размер: 278824 байтов (272 KiB)
SHA256: 120519C71AD2F6563E19A355A33955637AD552446B873B0D2B8A12AB459D3F27

 

1 Solution
AlexC-FTNT
Staff
Staff

AFAIK, Only AV and IPS signatures can be updated as such. 

Updating databases should be done from FortiGuard or FortiManager, and manual updates are normally failing from ftp/tftp (like ISDB which surely does not work as such).

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Updating-AV-IPS-package-from-CLI-using-FTP...

 

Assuming you are already running FortiOS 7.0 (at least), feel free to open a case to addres this to developers. It may have been disabled, but should be checked. 
The error you show: "Result: Unauthorized" may also show a problem with the FTP server
check in a separate SSH session "diag debug update -1" while you run the command to upload the file from a server


- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -

View solution in original post

1 REPLY 1
AlexC-FTNT
Staff
Staff

AFAIK, Only AV and IPS signatures can be updated as such. 

Updating databases should be done from FortiGuard or FortiManager, and manual updates are normally failing from ftp/tftp (like ISDB which surely does not work as such).

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Updating-AV-IPS-package-from-CLI-using-FTP...

 

Assuming you are already running FortiOS 7.0 (at least), feel free to open a case to addres this to developers. It may have been disabled, but should be checked. 
The error you show: "Result: Unauthorized" may also show a problem with the FTP server
check in a separate SSH session "diag debug update -1" while you run the command to upload the file from a server


- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -
Labels
Top Kudoed Authors