Monitoring antivirus/UTM database versions

[dnamza]

Hey guys,

Wondering if anyone out there has ever set up something where they monitor the database version of Antivirus or any UTM service for example?

Could this be done through SNMP?

Thanks

[emnoc]

Yes you can do that but it depends on  fortiOS version, IIRC  earlier items didn't support the OID

fgsysVersionAv

1.3.6.1.4.1.12356.101.4.2.1

e.g

iso.3.6.1.4.1.12356.101.4.2.1.0 = STRING: "16.00560(2012-10-19 08:31)"

Give it a try .

Curious: Why do you need to monitor the AV database.? Are you writing any nagios health checks?

[dnamza]

Hey emnoc,

we’re managing a few hundred fortigates and recently there was an issue where and intrusion was found but wasn’t detected by the fortigate as the IPS signatures wasn’t updated.so we’re trying to figure out a way where we could monitor each UTM database version of each device.