Fortinet FortiGate FortiGate-100A, Руководство администратора

Страница: 119 / 388

System maintenance Backing up and Restoring
FortiGate-100A Administration Guide 01-28006-0068-20041105
119
Figure 45: Update center
FortiProtect
Distribution
Network The status of the connection to the FortiProtect Distribution Network (FDN).
Available means that the FortiGate unit can connect to the FDN. You can
configure the FortiGate unit for scheduled updates. See “To enable
scheduled updates” on page 121 .
Not available means that The FortiGate unit cannot connect to the FDN. You
must configure your FortiGate unit and your network so that the FortiGate
unit can connect to the Internet and to the FDN. For example, you may need
to add routes to the FortiGate routing table or configure your network to allow
the FortiGate unit to use HTTPS on port 8890 to connect to the Internet. You
may also have to connect to an override FortiProtect server to receive
updates. See “To add an override server” on page 121 .
Unknown means that this FortiGate unit has not attempted to connect to the
FDN.
Push Update Available means that The FDN can connect to the FortiGate unit to send
push updates. You can configure the FortiGate unit to receive push updates.
See “To enable push updates” on page 123 .
Not available means that the FDN cannot connect to the FortiGate unit to
send push updates. Push updates may not be available if you have not
registered the FortiGate unit (see “To register a FortiGate unit” on page 128 ),
if there is a NAT device installed between the FortiGate unit and the FDN
(see “Enabling push updates through a NAT device” on page 124 ), or if your
FortiGate unit connects to the Internet using a proxy server (see “To enable
scheduled updates through a proxy server” on page 122 ).
Unknown means that this FortiGate unit has not attempted to connect to the
FDN.
Refresh When you select Refresh, the FortiGate unit tests its connection to the FDN.
The test results are displayed at the top of the System Update page.
Use override
server address If you cannot connect to the FDN or if your organization provides antivirus
and attack updates using their own FortiProtect server, you can configure an
override server.
Select the Use override server address check box and enter the IP address
of a FortiProtect server.
If after applying the override server address, the FortiProtect Distribution
Network setting changes to available, the FortiGate unit has successfully
connected to the override server. If the FortiProtect Distribution Network
stays set to not available, the FortiGate unit cannot connect to the override
server. Check the FortiGate configuration and the network configuration to
make sure you can connect to the override FortiProtect server from the
FortiGate unit.