Check support entitlement from CLI

[mackdav]

So in the course of walking all my edge firewalls across various customers to update firmware, I've noticed that some of them have lapsed support.

Is there a way to query the firewall's support and fortiguard entitlements from the command line? I am looking for the equivalent of the information displayed in 5.2.x in System -> Config -> Fortiguard.

Thanks

[emnoc]

Take a look at

http://socpuppet.blogspot.com/2015/10/howto-determine-if-your-fortinet.html

[AtiT]

Maybe this command is that you are looking for?

(global) # get sys fortiguard

[ede_pfau]

get sys fortiguard

will list a long list of infos around the services. If you don't use more mode you might grep on 'licence' to extract the relevant lines.

get sys fortiguard-service status

is more compact:

NAME               VERSION LAST UPDATE          METHOD    EXPIRE              

AV Engine            5.147  2013-06-14 15:06:00  manual       2015-12-16 00:00:00 

Virus Definitions   32.848  2016-02-25 12:36:39  scheduled    2015-12-16 00:00:00 

Extended set        32.848  2016-02-25 12:36:39  scheduled    2015-12-16 00:00:00 

Flow-AV set         31.195  2015-12-15 14:27:00  manual       2015-12-16 00:00:00 

Attack Definitions   6.751  2015-12-15 02:00:00  manual       2015-12-16 00:00:00 

IPS/FlowAV Engine    2.179  2014-01-15 11:52:00  manual       2015-12-16 00:00:00