IPS definitions update

[nflnetwork29]

I'm looking at some firewalls and their security ratings , trying to clean some things up and I'm seeing several firewalls with what seems to be out of date IPS Definitions .

Are they not supposed to be updating Automatically or is this something I need to do Manually?

Thanks, 

[samandeep]

Hello @nflnetwork29 ,

Are you using an IPS security profile in any of your firewall policies? If so, please refer to the following articles for troubleshooting. 

Please follow below articles:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-update-IPS-signatures-at-FortiGate-...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-unable-to-update-IPS-and-antivir...

If the issue persists, open a ticket with TAC and they will assist you based on your FortiGate's configuration

Thank You,

Amandeep

[nflnetwork29]

Hello actually I just looked and no there is no IPS security profile active on the ACL's. 

Is this why it's not updating?

[esalija]

Hi @nflnetwork29 

Thank you for choosing Fortinet Community!

Please run the command  and check the IPS attack Engine:

# diagnose auto-update version 

Enable the Intrusion Prevention feature at System -> Feature Visibility

You need to apply the IPS Security Profile at least to one policy.

Please follow the KB for more details - https://community.fortinet.com/t5/FortiGate/Technical-Tip-Valid-IPS-license-but-not-showing-in-Forti...

Best regards,

Erlin