how to block all the connectionsfrom the fortigate to fortiguard servers and FDN

[soumyarani]

i have purchased a new fortigate 101e and it uses the fortiOS 6.0.6 and before i connect it to the internet i want to disable all connections to fortiguard servers and forti Distribution Network(FDN), our enviroment will use a manual updates for it and its services, so i have:

[ol]

Changed the DNS and the NTP (because they contain ips with is in fortinet)

In FortiGuard we disabled push update and scheduled updates, improve IPS quality, override FortiGuard server.

Disabled sending malware statics to FortiGuard

Disable the submission of security rating results to FortiGuard by: set security-rating-result-submission disable

Change the DNS record for the update.fortiguard.net to resolve to a local ip in the dns server.

disabled the fortiguard anycast.[/ol]

and in the web filter and DNS i will not use the foriguard category base filter i will use a static url filter.

i just want to make sure non of my traffic reach fortiguard or FDN or any of their servers before i connect it to the internet.

Appreciate your help. thanks.

[mauromosc]

Hi, Soumyarani,

have you checked this article?

https://kb.fortinet.com/kb/documentLink.do?externalID=FD46618

Regards,

Mauro.