update Fortigate 110C

[AEF]

Hi, In my fortigate 110C, i have 2 wan ports gives access to internet, but i can' t do the update automaticaly of firewall The ping doesn' t work from the firewall(fortigate 110c) to the internet, the connexion work to the protocoles 80, 443, What should I do to make the update work thank you in advance

[rwpatterson]

Make sure any interface facing the Internet has NAT enabled, and try again.

[AEF]

Hello, The NAT is enabled, but there is no update of firewall

[rwpatterson]

Check the DNS settings. If the FGT cannot resolve the names, updates will fail. Your PING test, was it by FQDN or IP address? Try a PING to 8.8.8.8 and let us know if that works.

[emnoc]

NAT has nothing todo with the src_address from the fortigate. Can you ping your next-hop for the internet gateway

[rwpatterson]

Unless it' s a private address. But in this case HTTP and HTTPS work from another network. That' s why I asked about DNS on the FGT itself and how he PINGed.

[AEF]

Hello again, The DNS is configured with 2 address DNS, and the ping does not work I have many rules I think that there are rules which cancel the use of updated because when I change the priorité of connexion to the internet, the ping and the updates work automatically, but the web connexion does not work I think that I must create another rule just to do the updates, but I haven' t the tcp or udp port protocol thank you in Advance

[AEF]

hello again, Is there a solution for this problem. thank' s

[emnoc]

Firewall policies have nothing to do with the fortigate updates process unless you have some local-policies. Dumb questions, do you have any thing upstream like a router ACL or another firewall that blocks updates? Have you looked at list of ports that the fortigate uses? And have you done any diag sniffer diagnostics? http://kb.fortinet.com/kb/viewContent.do?externalId=10773

[rwpatterson]

Do you have any policy routes mucking up things?