Update AV definition

[boris]

Hello,

I have a Fortigate 100D and recently i go to see   the AV definition and Surprise, i think that the update don't work

FortiGuard Services

Next Generation FirewallIPS & Application ControlLicensed (Expires 2018-02-25)(2017-07-17)IPS Definitions11.00183 (Updated 2017-07-15 via Scheduled Update) [Update] IPS Engine3.00167 (Updated 2016-04-22 via Manual Update) 

---

ATP ServicesAntiVirusLicensed (Expires 2018-02-25)(2017-07-17)AV Definitions1.00000 (Updated 2012-10-17 via Manual Update) [Update] AV Engine5.00178 (Updated 2016-06-30 via Manual Update) Web FilteringLicensed (Expires 2018-02-25) 

---

Other ServicesVulnerability ScanLicensed (Expires 2018-02-25) VCM Plugins1.00384 (Updated 2015-10-02 via Manual Update) [Update] Email FilteringLicensed (Expires 2018-02-25) Messaging ServicesUnreachable 

Can you confirm me that it's not normal? And How to update this?

Thank you

[boris]

ok, i update manually

Now i have this :

AntiVirusLicensed (Expires 2018-02-25)(2017-07-17)AV Definitions50.00276 (Updated 2017-07-17 via Manual Update) [link=https://192.168.110.250:10333/system/status/virusupdate][Update][/link] AV Engine5.00178 (Updated 2016-06-30 via Manual Update) Web FilteringLicensed (Expires 2018-02-25)

But for the VCM i have 3 choice

x86,x64 or ARM

What file can i choose?

[hmtay_FTNT]

Hello boris, 

Your FGT100D should be on a x64 architecture. Can you try the x64 one?

[boris]

Hello hmtay

I think that the update is ok

Other ServicesVulnerability ScanLicensed (Expires 2018-02-25)(2017-07-19)VCM Plugins1.00384 (Updated 2017-07-19 via Manual Update) [Update] Email FilteringLicensed (Expires 2018-02-25) Messaging ServicesUnreachable 

---

but the version 1.00384 is always the same, i think it's the last one for the moment.

And for the Av definition, it 's possible to push the update, but what is the IP adress?

What is the best pratice? Manual or Push?

Thank you

[hmtay_FTNT]

Hello boris,

It is recommended to have a scheduled update as often as your environment would allow. If you are able to set up push update, that would be even better. Note that, to have push update set up correctly, if the Fortigate is behind a NAT device, you need to add extra information under override push IP. The NAT device then needs to be configured to forward the traffic to the Fortigate.

Homing

[boris]

ok thank you HMtay

But what is the ip of fortiguard?

Thanks