FortiGate Administration Guide - FirewallShop.com

System Maintenance
FortiGuard Center
Figure 113:Example network: Push updates through a NAT device
Internet
FDN
Server
NAT Device
Push Updates
Internal Network
General procedure
Use the following steps to configure the FortiGate unit on the internal network and
the NAT device so that the FortiGate unit on the internal network can receive push
updates:
1 Register and license the FortiGate unit on the internal network so that it can
receive push updates.
2 Configure the FortiGuard Center of the FortiGate unit on the internal network.
• Allow push updates
• Add an override push update IP. Usually this would be the IP address of the
external interface of the NAT device
• If required, change the override push update port
3 Add a port forwarding virtual IP to the NAT device.
• Set the external IP address of the virtual IP to match the override push update
IP. Usually this would be the IP address of the external interface of the NAT
device.
4 Add a firewall policy to the FortiGate NAT device that includes the port forwarding
virtual IP.
To configure the FortiGuard Center of the FortiGate unit on the internal
network
1 Go to System > Maintenance > FortiGuard Center.
2 Select Allow Push Update.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 197