Fortinet FortiGate FortiGate-5020, Administration Manual

Page: 129 / 402

System Maintenance Update center
FortiGate-5000 series Administration Guide 01-28008-0013-20050204
129
Figure 51: Update center
FortiProtect
Distribution
Network The status of the connection to the FortiProtect Distribution Network (FDN).
A green indicator means that the FortiGate unit can connect to the FDN. You
can configure the FortiGate unit for scheduled updates. See “To enable
scheduled updates” on page 131 .
A red-yellow flashing indicator means that the FortiGate unit cannot connect
to the FDN. Check your configuration. For example, you may need to add
routes to the FortiGate routing table or configure your network to allow the
FortiGate unit to use HTTPS on port 443 to connect to the Internet. You may
also have to connect to an override FortiProtect server to receive updates.
See “To add an override server” on page 131 .
Push Update A green indicator means that the FDN can connect to the FortiGate unit to
send push updates. You can configure the FortiGate unit to receive push
updates. See “To enable push updates” on page 133 .
A red-yellow flashing indicator means that the FDN cannot connect to the
FortiGate unit to send push updates. Push updates may not be available if
you have not registered the FortiGate unit (see “To register a FortiGate unit”
on page 138 ), if there is a NAT device installed between the FortiGate unit
and the FDN (see “Enabling push updates through a NAT device” on
page 134 ), or if your FortiGate unit connects to the Internet using a proxy
server (see “To enable scheduled updates through a proxy server” on
page 132 ).
Refresh When you select Refresh, the FortiGate unit tests its connection to the FDN.
The test results are displayed at the top of the System Update page.
Use override
server address If you cannot connect to the FDN or if your organization provides antivirus
and attack updates using their own FortiProtect server, you can configure an
override server.
Select the Use override server address check box and enter the IP address
of a FortiProtect server.
If after applying the override server address, the FortiProtect Distribution
Network setting changes to available, the FortiGate unit has successfully
connected to the override server. If the FortiProtect Distribution Network
stays set to not available, the FortiGate unit cannot connect to the override
server. Check the FortiGate configuration and the network configuration to
make sure you can connect to the override FortiProtect server from the
FortiGate unit.
Update The antivirus (including grayware), Spam filter, and attack definitions and
engines for which update information is displayed.