Manually uploading AV and IPS updates
The built-in FDS will retrieve AV and IPS update packages from the FDN automatically at the scheduled time, then re-distribute them to requesting devices; however, you can also manually upload the AV and IPS packages to the FortiManager system, and manually re-distribute them to devices.
• You can retrieve AV and IPS update packages from the Fortinet Customer Service & Support web site to your computer, then upload them to the FortiManager system. This can be useful if your FortiManager system must distribute packages other than the ones currently available from the FDN. (In this case, you would also disable synchronization with the FDN.)
• You can manually distribute update packages to devices from the FortiManager system. This can be useful when the AV and IPS packages are reverted, which can occur when restoring device firmware.
Uploads to devices can be initiated by either push or traditional upload methods. Both methods require you to enable SSH and HTTPS administrative connections from the FortiManager system’s IP address on the device’s network interface. Push requires that the device is enabled to receive push messages.
To manually upload AV or IPS updates to one or more devices:
1. Select a device in the device manager.
2. Select System > Dashboard > Service Usage.
3. Select the tab for the type of threat to be manually updated.
4. Scroll to the bottom of the page and select Manual Update.
5. Select the antivirus or IPS file to be uploaded and click Push.
6. Select OK.
The FortiManager system uploads the selected package to the selected device(s).
To push AV or IPS updates to one or more devices:
1. Select a device in the device manager.
2. Select
System > Dashboard > Service Usage; see
Figure 160 3. In the License Information area, select Push for the device that you want to update.
A UDP message announcing the availability of the most current update is sent to the device. If the device is enabled to receive push updates, it then downloads the update from the FortiManager system.
| Manual uploads do not bypass the requirement that the FortiManager system must be able to connect to the FDN to validate device licenses for FortiGuard Antivirus and IPS. |
