How can Disable event "Fortigate update now failed"?

[Rotta]

Hi Everyone

My firewall's installed zone cannot connect to the internet, causing a system event log entry with the message 'FortiGate update now failed' every 2 minutes. And Licenses information status Pending always.

Is there a way to solve this problem?   

Firewall OS ver. 7.2.2

Thank You

FortiGate  

[srajeswaran · Accepted solution]

You may try uploading the license file manually as below.

To manually upload FortiGate licenses in the GUI:

1. Register the FortiGuard license on FortiCloud. See Registration in the FortiOS Administration Guide for more information.

2. Download the product entitlement file in FortiCloud:

   1. Go to Products > Product List.

   2. Select the serial number of the FortiGate. The product page opens.

   3. In the License & Key section, select Get The License File. The file will download to the device in the following format:  FG201E*********ProductEntitlement.lic

3. In FortiOS, go to System -> FortiGuard. The status for all services will be Pending.

3. Select Upload License File. The file explorer will open.

5. Navigate to the product entitlement file and select Open.

   The license file will upload to the FortiGate. Once the upload is complete, the FortiGate will show that it is registered and licensed.

5. Select Apply.
   
   Ref: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Procedure-to-apply-FortiGate-firewall-lice...

[Rotta]

Thank You. This method includes solving event "Fortigate update now failed"?

[srajeswaran]

I expect it to fix the license issue, but there can be similar errors for other db update failures from Fortiguard. Can you disable the cloud communications as suggested in below article (it is anyways will not work as the fortigate don't have internet access)

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/569561/disable-all-cloud-communicati...

config system global
    set cloud-communication disable
end

[Rotta]

Thanks for support. I try config follow recommend, But it still show on system event.

[srajeswaran]

do you mean the logs are coming even after disabling the cloud-communication?

[Rotta]

Yes.

[srajeswaran]

did you upload the license file?

[hbac]

Hi @Rotta,

If FortiGate can't reach the Internet, you can try to disable Scheduled updates under System > FortiGuard > FortiGuard Updates and see if those logs are still being generated. 

Regards, 

[pavankr5]

Hello @Rotta 

FortiGate device is unable to reach the FortiGuard servers, you won't be able to update your FortiGate's firmware and security services. FortiGuard servers are responsible for providing updates, including antivirus, IPS (Intrusion Prevention System), application control, and web filtering definitions.

To reach the fortiguard server refer below article 
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-connect-to-FortiGuard-serv....

let us know if you have any queries.

Thanks

Pavan