Displaying the server list
The get webfilter status command shows the list of FDS servers the FortiGate unit is using to send web filtering requests. Rating requests are only sent to the server on the top of the list in normal operation. Each server is probed for Round Trip Time (RTT) every two minutes.
You can optionally add a refresh rate to the end of this command and that will determine how often the server list will be refreshed.
Rating may not be enabled on your FortiGate unit.
get webfilter status
Sample Output:
Locale : english
License : Contract
Expiration : Thu Oct 9 02:00:00 2011
Hostname : fortiguard.example.com
-=- Server List (Mon Feb 18 12:55:48 2008) -=-
IP | Weight | RTT | Flags | TZ | Packets | CurrLost | TotalLost |
a.b.c.d | 0 | 1 | DI | 2 | 1926879 | 0 | 11176 |
10.1.101.1 | 10 | 329 | | 1 | 10263 | 0 | 633 |
10.2.102.2 | 20 | 169 | | 0 | 16105 | 0 | 80 |
10.3.103.3 | 20 | 182 | | 0 | 6741 | 0 | 776 |
10.4.104.4 | 20 | 184 | | 0 | 5249 | 0 | 987 |
10.5.105.5 | 25 | 181 | | 0 | 12072 | 0 | 178 |
Output Details
Hostname is the name of the FortiGuard server the FortiGate unit will attempt to contact. The Server List includes the IP addresses of alternate servers if the first entry cannot be reached. In this example the IP addresses are not public addresses
The following flags in get webfilter status indicate the server status:
• D - the server was found through the DNS lookup of the hostname. If the hostname returns more than one IP address, all of them will be flagged with D and will be used first for INIT requests before falling back to the other servers.
• I - the server to which the last INIT request was sent.
• F - the server has not responded to requests and is considered to have failed.
• T - the server is currently being timed.