Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Steffffi
New Contributor II

FG30E with 5.6.14 constantly tries to update unlicensed AV Engine Updates AV database updated by

Good Day!

 

Some months ago, I switched my old FG30E because of the port problems (falling back to10mbit) to a new, used one, which was licensed to a Premium Support contract (mine was no Premium), that is the only difference, both have the exact same config.

 

Took a routine look yesterday into the System Events and I was quite puzzled: the FG30E constantly tries to update the signatures, although, no scheduled updates ticked or any license active anymore. Furthermore, it clogs my syslog. The intervals are between 1 minute to 30 minutes.

 

"Log Description: AV database updated by scanunit , User Interface n/a Scanunit initiated a virus engine/definitions update"

 

Any chance, I can turn this thing off? Or just ignore it and set System Events to no logging so I wont see it any more?

 

Regards,

Stephan

 

error.jpg

1 REPLY 1
Steffffi

"disable the AV engine update attempts or configure the system to stop logging these events."

 

Second, I know how to, but 1st one, already tried to disable "scheduled updates", also in CLI, but no luck, still the same.

 

Between: is it a "problem", like CPU wise, or just some minor thing to ignore?

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors