Fortigate update using which link?

[machiasiaweb]

Hello,

I have Fortigate 100E with dedicated management port.   I would like to know when firewall update. For example, download signature definition.  Which interface will be used?  Management port or WAN port?

Thanks!

[oheigl]

Hi,

the FortiGate automatically chooses the best interface. You can force the communication with the following command (for FortiGuard service updates):

config system fortiguard

   set source-ip x.x.x.x

end

Verify the configuration with:

get system source-ip status

[machiasiaweb]

Hello,

I have read following as well but still not sure which x.x.x.x I should setup.

http://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-system-administration-54/Advanced/IP%...

Now my mgmt port IP is 192.168.10.100

and

WAN IP is 192.168.200.200

which they are in different VDOM

If I want using mgmt port, then I should setup like this?

 set source-ip 192.168.10.100

Thanks!

[oheigl]

If you have different VDOMs it's another situation. You need to be sure that the mgmt port is in the VDOM declared as the management VDOM. The management VDOM can be set in the GUI under Global > System > VDOM

[machiasiaweb]

You means like this?

http://kb.fortinet.com/kb/documentLink.do?externalID=FD38863

Thanks!

[MikePruett]

Yup, you can define a certain VDOM as the management VDOM and that is the one that FortiGuard services will default to. If you don't have VDOM's then the only logical instance of the Gate will be the source.