FortiGate Administration Guide - FirewallShop.com

System Maintenance
FortiGuard Center
4 Select Apply.
The FortiGate unit tests the connection to the override server.
If the FortiGuard Distribution Network availability icon changes from grey, the
FortiGate unit has successfully connected to the override server.
If the FortiGuard Distribution Network availability icon stays gray, the FortiGate
unit cannot connect to the override server. Check the FortiGate configuration and
network configuration for settings that would prevent the FortiGate unit from
connecting to the override FortiGuard server.
Enabling push updates
To enable scheduled updates through a proxy server
If your FortiGate unit must connect to the Internet through a proxy server, you can
use the config system autoupdate tunneling command to allow the
FortiGate unit to connect (or tunnel) to the FDN using the proxy server. For more
information, see the FortiGate CLI Reference.
The FDN can push updates to FortiGate units to provide the fastest possible
response to critical situations. You must register the FortiGate unit before it can
receive push updates. To register your FortiGate unit, go to Product Registration
and follow the instructions.
When you configure a FortiGate unit to allow push updates, the FortiGate unit
sends a SETUP message to the FDN. The next time new antivirus or attack
definitions are released, the FDN notifies all FortiGate units that are configured for
push updates that a new update is available. Within 60 seconds of receiving a
push notification, the FortiGate unit requests an update from the FDN.
Note: Push updates are not supported if the FortiGate unit must use a proxy server to
connect to the FDN. For more information, see “To enable scheduled updates through a
proxy server” on page 195.
When the network configuration permits, configuring push updates is
recommended in addition to configuring scheduled updates. On average the
FortiGate unit receives new updates sooner through push updates than if the
FortiGate unit receives only scheduled updates. However, scheduled updates
make sure that the FortiGate unit receives the latest updates.
Enabling push updates is not recommended as the only method for obtaining
updates. The FortiGate unit might not receive the push notification. Also, when the
FortiGate unit receives a push notification it makes only one attempt to connect to
the FDN and download updates.
To enable push updates
1 Go to System > Maintenance > FortiGuard Center.
2 Select Allow Push Update.
3 Select Apply.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 195