FortiGate Administration Guide - FirewallShop.com

System Maintenance
FortiGuard Center
For more information, see “Enabling push updates through a NAT device” on
page 196.
Figure 110:AntiVirus and IPS Options section
Use override
server address
Allow Push
Update
Push Update
Status Icon
Use override
push
IP
port
Scheduled
Update
Every
Daily
Select to configure an override server if you cannot connect to the FDN
or if your organization provides updates using their own FortiGuard
server.
When selected, enter the IP address or domain name of a FortiGuard
server and select Apply. If the FDN Status still indicates no connection
to the FDN, see “Troubleshooting FDN connectivity” on page 193.
Select to allow push updates. Updates will be sent to your FortiGate unit
when they are available without you checking if they are available.
Push Update Status Icon shows the status of the push update service.
The status of the FortiGate unit for receiving push updates:
• grey - unreachable - FortiGate unit is not able to connect to push
update service
• yellow - not available - push update service is not available with
current support license
• green - available - push update service is allowed. See “To enable
push updates” on page 195.
If the icon is either grey or yellow, see “Troubleshooting FDN
connectivity” on page 193.
Enable if there is a NAT device between the FortiGate unit and the FDS.
Override push allows you to create a forwarding policy that redirects
incoming FDS push updates to your FortiGate unit.
The NAT device must be configured to forward the FDS traffic to the
FortiGate unit, including UDP port 9443.
See “Enabling push updates through a NAT device” on page 196.
Available only if Allow Push Update is selected.
Enter the IP address of the NAT device in front of your FortiGate unit.
FDS will connect to this device when attempting to reach the FortiGate
unit.
Available only if Use override push is enabled.
Select the port on the NAT device that will receive the FDS push
updates. This port must be forwarded to UDP port 9443 on the
FortiGate unit.
Available only if Use override push is enabled.
Select this check box to enable scheduled updates.
Attempt to update once every 1 to 23 hours. Select the number of hours
between each update request.
Attempt to update once a day. You can specify the hour of the day to
check for updates. The update attempt occurs at a randomly
determined time within the selected hour.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 191