Fortinet Gate 60D, Administration Manual

Page: 268 / 706

Configuring FortiGuard Services System Maintenance
FortiGate Version 4.0 Administration Guide
268 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
Downloading antivirus and IPS updates
In the Antivirus and IPS Options section, you can schedule antivirus and IPS updates,
configure an override server, or allow push updates. You can access these options by
selecting the expand arrow.
The SETUP message that the FortiGate unit sends when you enable push updates
includes the IP address of the FortiGate interface that the FDN connects to. Use the
Use
override push IP option when your FortiGate unit is behind a NAT device. The FortiGate
unit sends the FDS the IP and port numbers of the NAT device to the FDS. The NAT
device must also be configured to forward the FDS traffic to the FortiGate unit on port
9443.
For more information, see “Enabling push updates through a NAT device” on page 274 .
Figure 158: AntiVirus and IPS Options section
[Last update date and
method] The date of the last update and method used for last attempt to
download definition updates for this service.
[Date] Local system date when the FortiGate unit last checked for updates
for this service.
Use override server
address Select to configure an override server if you cannot connect to the
FDN or if your organization provides updates using their own
FortiGuard server.
When selected, enter the IP address or domain name of a FortiGuard
server and select
Apply . If the FDN Status still indicates no connection
to the FDN, see “Troubleshooting FDN connectivity” on page 271 .
Allow Push Update Select to allow push updates. Updates are then sent automatically to
your FortiGate unit when they are available, eliminating any need for
you to check if they are available.
Allow Push Update
status icon The status of the FortiGate unit for receiving push updates:
Gray (Unreachable) - theFortiGate unit is not able to connect to push
update service
Yellow (Not Available) - the push update service is not available with
current support license
Green (Available) - the push update service is allowed. See
“Enabling push updates” on page 273 .
If the icon is gray or yellow, see “Troubleshooting FDN connectivity”
on page 271 .
Expand arrow Allow Push Update Status